fc88a989eb8b7db25c502b68db6fe062_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc88a989eb8b7db25c502b68db6fe062_JaffaCakes118
Size

184KB
MD5

fc88a989eb8b7db25c502b68db6fe062
SHA1

cf5e1219e6edd65b7e0b1b5d5401464e680d114c
SHA256

ca773873d1fceb96601b2fa2ed3a515768c8f605d2232f8c9bd6b1985a32d805
SHA512

d67b081887c272889fe016b31cccec0346e4b1c9880dc69f2a45fa7ff7762261b84b4ce3c805b66f61e83f902d9b76f21ce0974e09cdddf0d3139969e7d29bad
SSDEEP

3072:pVG2RupdJaeXOJVtdXSJ+RUXp7NyfukWt9eM+lqyOx+kcFfUhUcADsg:pwNaeAVtdXkD5kXvlrecFfUesg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc88a989eb8b7db25c502b68db6fe062_JaffaCakes118

Files

fc88a989eb8b7db25c502b68db6fe062_JaffaCakes118
.dll windows:5 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ