fe03a285ef8594a4cb1f341566eb079f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe03a285ef8594a4cb1f341566eb079f_JaffaCakes118
Size

199KB
MD5

fe03a285ef8594a4cb1f341566eb079f
SHA1

64bf9898ab84361140b766d96987a46f2b9b7953
SHA256

48e716624dc7f8bf35263967a3d126ae45cab547863e9c812b29146c136a75ff
SHA512

78e9c5e6f988c8d60e6378eea8eab4b08b398165637095f0cc855710700b067a47e4f6962b594102aa93e2cdce77308699b6ebee96524bedb61af568d9cfdc71
SSDEEP

6144:c2U4ctSGTaF/DhScPQ2GYCyr4mVVnx7PyfOLq:LJfG+F/FyYpFnx7eOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe03a285ef8594a4cb1f341566eb079f_JaffaCakes118

Files

fe03a285ef8594a4cb1f341566eb079f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

twunk_32.pdb

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE