fe653bba9e16569ed818b0f174a98dbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe653bba9e16569ed818b0f174a98dbd_JaffaCakes118
Size

196KB
MD5

fe653bba9e16569ed818b0f174a98dbd
SHA1

ae46461ea25275594c1958993c0c1b3ca5a61690
SHA256

6a413abe8b7100c183e43ff206ed03d50a3058846541855f3f2a1852ac14ee7a
SHA512

40089afdbe9458c42d5ea588da9bb9c0bfa79b9bd16aae2c830f42ccf73b16e9160f91cf654ae0583677aefa059b9c51a25446a19a341a57c52af74cdd6747f6
SSDEEP

6144:iJHSACUCSYeKfKvPEnHb9LSRlyZ/TZ80U3H4DemE:V3SYnmEHB2cZLZ8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe653bba9e16569ed818b0f174a98dbd_JaffaCakes118

Files

fe653bba9e16569ed818b0f174a98dbd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

userinit.pdb

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE