fe64561a3b87d17fa8ff30d58180a6d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe64561a3b87d17fa8ff30d58180a6d9_JaffaCakes118
Size

389KB
MD5

fe64561a3b87d17fa8ff30d58180a6d9
SHA1

0c63300ec4e4c18057387f5e16fb22b5fd9ee7de
SHA256

974d2fdd0a3b0e3963948ecf37b13f110ff57e8c29a9b3a7208d26e9ff9015bd
SHA512

3e1074adcd5e198fca9ff1f432164bbb2fbda1806fe405684c3561b30a6e50ada267d74454ce9af0cd543aa138562b5cb7274d1a85003c117196215544ee4ed0
SSDEEP

6144:Mu9QBMQNsPCy0TrYeqipD+MK5zySlX5o8ThQ00S9YwJKxqsWoi47XqfJH7OHuiLK:Mu9QVPaeZCyK9RKBxXmHcrpc6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe64561a3b87d17fa8ff30d58180a6d9_JaffaCakes118

Files

fe64561a3b87d17fa8ff30d58180a6d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 358KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ