feb4a1d7bf39b59fb38a7c46bb3da75f_JaffaCakes118 | Triage

Sharing

General

Target

feb4a1d7bf39b59fb38a7c46bb3da75f_JaffaCakes118
Size

14KB
MD5

feb4a1d7bf39b59fb38a7c46bb3da75f
SHA1

e44398c682989f2b602d2b9982558ab7d6798344
SHA256

7c5e329ea078ad6e4addb38d433448411151e4a187f2835b25a6faaadc6c09dd
SHA512

2eb5ae83c495bd7a39f9665bd6505b2ebe27aecca2927be1b35f0f4d4513c937edacac1791563aed4038d6acccb7d766ae1126c88f23d4b70e281d7738eeb892
SSDEEP

192:nRpgXEp0ahmp7H2j6aGKz1hF1N+kDkO25+cdotibh1Kc+1Sou6vKjfApaB+6Ga0:EXEqaQp7HU6KzrKHKtihmehmag6d0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FineWare.RapidFolder.v1.0.0.39-DVT/DVT/patch.exe

Files

feb4a1d7bf39b59fb38a7c46bb3da75f_JaffaCakes118
.zip
FineWare.RapidFolder.v1.0.0.39-DVT/DVT/patch.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.Upack
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FineWare.RapidFolder.v1.0.0.39-DVT/dvt.nfo
FineWare.RapidFolder.v1.0.0.39-DVT/file_id.diz
keygen.nfo