fcbf397c60a55011f54448daaf33b3fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcbf397c60a55011f54448daaf33b3fa_JaffaCakes118
Size

713KB
MD5

fcbf397c60a55011f54448daaf33b3fa
SHA1

bcf380690a020e3b855c1ede04039a9880da2b12
SHA256

086c1ff4d0aaad9204300ed2c8f02d9e7250982cdf50ef494e261cf86e9a8fbe
SHA512

f18b1c54ad53d8a8c091a2bbda1a6a9d0da78d08eb46dc8e0189ff9aff3e24baca29bfd89262bcec4a3362d324e8497c0a0c5ebf9d40864e2d0a9464d84186f5
SSDEEP

12288:PK6GdFpCRbgoiDL2j/4AqX3oHEOEQkxCGxZC9Nff7781zbQopE:S6GdFpCRU7uXkOgZC9Nff77MzskE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcbf397c60a55011f54448daaf33b3fa_JaffaCakes118

Files

fcbf397c60a55011f54448daaf33b3fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\USER\Documents\Visual Studio 2010\Projects\ePsmpVfEBbD7JvU35\ePsmpVfEBbD7JvU35\obj\x86\Release\ePsmpVfEBbD7JvU35.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ