fde5ad71b839aa1c99cc1dc1978f66b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fde5ad71b839aa1c99cc1dc1978f66b9_JaffaCakes118
Size

113KB
MD5

fde5ad71b839aa1c99cc1dc1978f66b9
SHA1

fc608d2eeca53d57ee895cdc93c271be9c4a4803
SHA256

63c262d0aa0da5573f17f7d17bec8e7cb5a888088b71e21f3991fb73b49faf78
SHA512

bb5427c75d01f78d7a84f09d8bb94564b4586ef194e6bbae1b550ee75cc2890c31ab1dbd662ca97ba2c7842d4d6606c36b2b6a01d5dc752c7bde995ea0bbffda
SSDEEP

1536:Stu2201JuTTGjAbXoZx4hmMu+cB3jwzZnT/h+eUyyyE4Tr/pP3EFBMn3DYbjDCKI:StvXuTTcKXoZxi83+LwwXx0FW3D0CKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde5ad71b839aa1c99cc1dc1978f66b9_JaffaCakes118

Files

fde5ad71b839aa1c99cc1dc1978f66b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.smbvyw
Size: 739B - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.69rt36
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.8fiftx
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE