fcf3ff498c5d98073c201cb6c670fd14_JaffaCakes118 | Triage

Sharing

General

Target

fcf3ff498c5d98073c201cb6c670fd14_JaffaCakes118
Size

373KB
MD5

fcf3ff498c5d98073c201cb6c670fd14
SHA1

755c61acbc59d890ea192dea0856279d45e395aa
SHA256

9ddb957ffd11f8b2b1c054273b3d440c2dc3ddc9f11d3e41ee0c52ac2f2cc6f1
SHA512

f3ddd77dc8388131342c91e4c617d53a988e0d1a7b5dea77aebc0ec6940dcd8ed2cd80ca0b8d7d918eaba4eb2ac411358df09d2d502d8ae167fbf92dde66f881
SSDEEP

6144:GOL3WXEouIhtbB5kwjEDq+KBNyvE6Wr80X+nI7lfKSx8lxLJ/dAbNJLYuPhN89GD:roTtNuwQDq+2RIQuUrx83d1AbNJLYuPB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ReBot_helper.exe

Files

fcf3ff498c5d98073c201cb6c670fd14_JaffaCakes118
.zip
ReBot_helper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ReBot_helper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ