fdd99a8da1420840d09f7e30a506b2e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdd99a8da1420840d09f7e30a506b2e1_JaffaCakes118
Size

298KB
MD5

fdd99a8da1420840d09f7e30a506b2e1
SHA1

2b76f5a04250d3f43b54f7fb97c6320855e22af8
SHA256

9f25dfbcb74bfe73f0ff735fd5d474a30c23ba385011283eb38c64e20711cf8c
SHA512

0f87e14dd084dc340d9b29f7da1f20a3243e60400bb0685df09f0a42c9745dbb076e91337bc6c49352f8530a3504b50e3d56ca3f80bf8ef51fe9f4e1906218dd
SSDEEP

6144:3ARCZcu8uF3NGCMwrtm9JYcsIhVr2KEo0gwSqgcWacPvQYjxHLg+lIfJUa:wRC/W/j5xr2K4ghFnlYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdd99a8da1420840d09f7e30a506b2e1_JaffaCakes118

Files

fdd99a8da1420840d09f7e30a506b2e1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE