fcb7b98517ec9d7b39299b8b3acd4781_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcb7b98517ec9d7b39299b8b3acd4781_JaffaCakes118
Size

650KB
MD5

fcb7b98517ec9d7b39299b8b3acd4781
SHA1

248015d8efe129f81445f8fd0065dfe461e22747
SHA256

67d9648df0794f2e174c254ed9cfffd7d13d42d112cdcc6531f4bd4d8d52ce05
SHA512

6d2a19e3de995b85f6bee717a2df763b8c994592de7530e2aa1987858e9bc3620b28876fb89defb91aa9112bf1096b7dc50f42673b6252dbae7b954cb3498b17
SSDEEP

12288:1q8clbHf/CMkDRE+MB0BG+mRc/2N9L5QKHL2IV65/6RPlAqQMAnCw/gNQfCf9v:4N1kDKFB0BGsOzHAN6RwGwbKfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcb7b98517ec9d7b39299b8b3acd4781_JaffaCakes118

Files

fcb7b98517ec9d7b39299b8b3acd4781_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 649KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 285B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ