fda19b8ed00656b866e03804c69aca52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fda19b8ed00656b866e03804c69aca52_JaffaCakes118
Size

753KB
MD5

fda19b8ed00656b866e03804c69aca52
SHA1

b2a97cbcd72edabfe091d74621eb94a832483d18
SHA256

1cbe7d1d132f7a16e484f985769c943f9d8476a0b4c23035c630d7bbf42e624e
SHA512

564cd0c350476ab4badc294a2a398ebf9140e84d3bc83a28d5994dc967c584e79703713a00bfbfe950a31c74ede7f4e2557ba329de1420037848777228a3fc16
SSDEEP

3072:CBpJN73Wnm5kAixEKQKPfErrxDtpF/KqaMbBpJN73Wnm5kAixEK:27N7SrW2srrxhpF/Z7N7SrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda19b8ed00656b866e03804c69aca52_JaffaCakes118

Files

fda19b8ed00656b866e03804c69aca52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mohammad\Desktop\Facebook\obj\x86\Debug\Facebook Account Secure.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ