fcc2f277b9573f7f62074309236d0b1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcc2f277b9573f7f62074309236d0b1d_JaffaCakes118
Size

3.7MB
MD5

fcc2f277b9573f7f62074309236d0b1d
SHA1

f16d93e4260adcd33d84a45d584b914bd90917a0
SHA256

c0824061b75507809798a3fc820c7a069aba906ca57d8d212a3cd39c8f2071ef
SHA512

56fa50cfae1e27b203c53d70646fec412bc633e4ef4d0a0b064de80c21c7da8f8760d3b7f10700dbae9f1e4a93dbd5cc3f1b3cfc6fb3c2d3dd4b75353180fc9f
SSDEEP

49152:eFS5HnYiyvdbWjxY8RHUUnBFVvF8c4fvFNy90oHT0eGYl6O7l5EV3W6Wy5LoxyEf:AS5HnYNOdj0x3oHXTlr77wWKh3J974F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc2f277b9573f7f62074309236d0b1d_JaffaCakes118

Files

fcc2f277b9573f7f62074309236d0b1d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 432KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ