fe87cb892925578fc77cebd812279107_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe87cb892925578fc77cebd812279107_JaffaCakes118
Size

564KB
MD5

fe87cb892925578fc77cebd812279107
SHA1

493d30606b57a8762b9ed600b633db0c1082c078
SHA256

c4a6110add190aa69b32e981726cf6437f45aa34b265393752d9f99e82f7c0a5
SHA512

e8766b8eb75f6d56c6b3acfacbeeff0d8edfbd4fbe94697328afb8e146a0c831ee06e1e269ba47a2bb3de1e384c46b6f97903f0bd82da2cb7f63b7ce10803006
SSDEEP

6144:zqyC9mgBueXpxcdzMOWldz2dQ8nb0eQrbg1+hqamuM58gp6yzkU8QqJyG6jQCh6j:g9mcDp5Oy6b0eybg1+hsuM2FyOkr3fQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe87cb892925578fc77cebd812279107_JaffaCakes118

Files

fe87cb892925578fc77cebd812279107_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ