fdd26bed97ad3884d7965b032763f107_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdd26bed97ad3884d7965b032763f107_JaffaCakes118
Size

48KB
MD5

fdd26bed97ad3884d7965b032763f107
SHA1

fba9de71d19b3c747a0947eb3a180699dc1b89f0
SHA256

9dbcb76d044231b8e992da134a79dd25affcc4c25b2f94984f5bd604be4faf69
SHA512

e2542c9d3da24a2bc932b3ea0e0bfddfc61c6df32491f3270a1637b573c2b7d928cf34fb446517c9bff8c092c369b2b8f931bd867eacd612521dbad2d8553c81
SSDEEP

768:ol6YG6C27LFYUhzqecO65UyRLrIrN21ftjYiubr7K96nIk:rYGQLphzQHUyRPkN2HpuP7RI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdd26bed97ad3884d7965b032763f107_JaffaCakes118

Files

fdd26bed97ad3884d7965b032763f107_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cleaned
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pgrdwwk
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE