fed25b672a07fe40a918bd14041f826d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fed25b672a07fe40a918bd14041f826d_JaffaCakes118
Size

579KB
MD5

fed25b672a07fe40a918bd14041f826d
SHA1

499d59b777500cbf2ed84520a87090c5ca2cf5a9
SHA256

b3aa15c517a5c57d6afb500ae37bc05f69352ecafa640479c075484cd0a3f2a0
SHA512

5e99e30d87d131001cd3848cb16d427a01021732a4cd3855025f384145b71fad0c817df9cd0f220681b80112948d2b779f1e169a8506c5c537e4cc3d558a0445
SSDEEP

12288:PMHWbYV6Joe+zSt8OCBl3x5m4CoWdoDfK/YMfy:kJWt8vBVPmqWdwMTfy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fed25b672a07fe40a918bd14041f826d_JaffaCakes118

Files

fed25b672a07fe40a918bd14041f826d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ