fd1320b0059fbbd074b60ad876b5d14c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd1320b0059fbbd074b60ad876b5d14c_JaffaCakes118
Size

418KB
MD5

fd1320b0059fbbd074b60ad876b5d14c
SHA1

534dd95f06699275691f0308fa0eb7f6036562fa
SHA256

b28ef1c9b0806a862d23a78188ba69e8f799ede626f141a419eb1b72c7fa068a
SHA512

150f4852d8c1ea07013b970497f57bdf58da39d62deaae7d855fb105df2587631dcf0bc906e3717690d12a918896c6ac53d4fa581ab8dc4978afa99b0e0ee861
SSDEEP

12288:fdPSqghiv2pv9b2FkPm6P3yFcNVa02QobO:fd6qUfzFpGcyB9a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd1320b0059fbbd074b60ad876b5d14c_JaffaCakes118

Files

fd1320b0059fbbd074b60ad876b5d14c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.gnqurm
Size: 3KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cpfjoj
Size: 96B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sftmmc
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ