fce7329fd99700cb76fe3d6d6adefc89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fce7329fd99700cb76fe3d6d6adefc89_JaffaCakes118
Size

905KB
MD5

fce7329fd99700cb76fe3d6d6adefc89
SHA1

1564c0d4d88128e1761af223faddc39d7495388a
SHA256

2d5f4518585e5c52ea7f0f6cdd855196c64e20731d94f847a3143a7b3643d47a
SHA512

5ef3a3fb3338d4c3be09bb0902a6737811ccd9b56fd6e1f976b5ef4cdfad06a4fe60a30167b318f108a51e65717d81a581a4b1df55df94819c87f1087c53e414
SSDEEP

24576:DsM5537UoWR4fYzq6Hm1/3vi5bY8YxWrbzzzzzkzzzzztoPPaDs:R5NOKSc1/3vimxWrbzzzzzkzzzzztoPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fce7329fd99700cb76fe3d6d6adefc89_JaffaCakes118

Files

fce7329fd99700cb76fe3d6d6adefc89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\DistributedAutoLink\Temp\CompileOutputDir\Setup.pdb

Sections

.text
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE