fedeaa931ea87c197fda88c03929b014_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fedeaa931ea87c197fda88c03929b014_JaffaCakes118
Size

54KB
MD5

fedeaa931ea87c197fda88c03929b014
SHA1

888e2010a5e6eb0fe7e915f72dcb6fab18cf209f
SHA256

5a406a748a8fa3de77e9b9051266212b6fe01d45f7ffa1c7469d48715dfd0045
SHA512

ca463c4ffada9c6daeaf72dda35de64173da8e1cc8038ab8597f183dfa7894aedfb73e05e0f22a7ce5309f5bdf06d5f441a100278604a812b6404fe7d50113aa
SSDEEP

768:b7Ns/EF3i7UB2UW6fCOCuF2ztXxJJ+Tm8hXl0U4yTVpE4pGIsf/PHTbKDYC4v:NssFEECuUom89li5KGjPTWYC4v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fedeaa931ea87c197fda88c03929b014_JaffaCakes118

Files

fedeaa931ea87c197fda88c03929b014_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@EnumCallback$qp6HWND__l
@FrontEnd_WndProc$qp6HWND__uiuil
@SendCopyData$qp6HWND__t1p17tagCOPYDATASTRUCT
__GetExceptDLLinfo

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE