fe6c3d53c9302b187a984f253e7b4313_JaffaCakes118 | Triage

Sharing

General

Target

fe6c3d53c9302b187a984f253e7b4313_JaffaCakes118
Size

139KB
MD5

fe6c3d53c9302b187a984f253e7b4313
SHA1

50cc7062facb8a9e4a351ab9a6d4ec022aabb10e
SHA256

f73eb5e7d654350c7a07fec327a1092ce07f72a871e732038d0702563e9f2be7
SHA512

16cda79d63b74f8b5a4a4db5383251a9c231a2e5504d5d81350606d39cbadd21607d1415cd14ee7d09a7ddd9d8d94274b6b557f33f161309e14650e4c72e6b1c
SSDEEP

3072:QFQ1ooL0n0wfXOmI32P5a8kx2jHXyUOqAbDKrhMPE9ZDn1/fRy:RooKH2mI3CQ6yUTrhueN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6c3d53c9302b187a984f253e7b4313_JaffaCakes118

Files

fe6c3d53c9302b187a984f253e7b4313_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

jSta
jStb

Sections

CODE
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ