fc7687129202ef1474b3959ff0e4fd41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc7687129202ef1474b3959ff0e4fd41_JaffaCakes118
Size

1.6MB
MD5

fc7687129202ef1474b3959ff0e4fd41
SHA1

91658a1f156e12e3092b7aacc9be68a28032bc06
SHA256

135fe7f379a915f1ae8656b852625f43079629a5699f809c32adf3ef9f369f98
SHA512

e63f7309ec01cdc145003e323c6a22f4054e42476c2028a2d4e9b6444ba3e4abadd5267987564ae3eb7b27bba2e30ff14b7a955480baad550a3e0008dc154140
SSDEEP

24576:/el/8lUx8cwFQAVYuMJOrEYQgkxNaZWiXn1A0c0MmAG6dAkQ8k:Wl/5jyQWNzAhgkxNaZWwn+0c0EHGh8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc7687129202ef1474b3959ff0e4fd41_JaffaCakes118

Files

fc7687129202ef1474b3959ff0e4fd41_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 816KB - Virtual size: 813KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 980KB - Virtual size: 977KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE