fcf1bcbe78cc4cfdb183ab467ba40bac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf1bcbe78cc4cfdb183ab467ba40bac_JaffaCakes118
Size

128KB
MD5

fcf1bcbe78cc4cfdb183ab467ba40bac
SHA1

3ba3a5f57a3d08dc8779f0abfd34a43e90da60af
SHA256

351450d304844895c11e36f989583ff6b36a87391313d6a7e97b5fc319594935
SHA512

6922c124e7de48c031471a5a53fbf2019c4bcb0dc08e8e58519d6a0e78abd0e4e34dc1b7378a9c726bf32fb231a4fa9fc1dbb9d4c34086e6104811df1834e1fb
SSDEEP

3072:TtqfOm4WmJZuBrmrQ1kabsRQjjjI1HQVdkdVxljc98kS79t:meWmJZgVk5RAA1w/02oR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf1bcbe78cc4cfdb183ab467ba40bac_JaffaCakes118

Files

fcf1bcbe78cc4cfdb183ab467ba40bac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ