fdcdfeef0674b89e635d1ac333feaec2_JaffaCakes118 | Triage

Sharing

General

Target

fdcdfeef0674b89e635d1ac333feaec2_JaffaCakes118
Size

30.6MB
MD5

fdcdfeef0674b89e635d1ac333feaec2
SHA1

7fab78839cf054b12553b2a84ada66debd84d65b
SHA256

8296ca3a4d2225bb380ee293801e9b258e08e5f37f715a50544b2b8de7550228
SHA512

49d07ad4f29e04d485944800ed6ad594512f71e32876c9d27dbc49ec563a2bd7d8e3805f27e204c47b1bd437d205b254e12b80c6ce77abc1ff13782da04a3bf8
SSDEEP

393216:15k2DQwa1ZFLHFvUiN80pRn+EJ8dEp/e+yTivh/tKE8GLj6mQANsO19xCv0uV:15Qr1JDN80uEBBxWZv0uV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdcdfeef0674b89e635d1ac333feaec2_JaffaCakes118

Files

fdcdfeef0674b89e635d1ac333feaec2_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28.6MB - Virtual size: 28.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ