11a0aae6a19c883d68e743836baec710_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a0aae6a19c883d68e743836baec710_JaffaCakes118
Size

1001KB
MD5

11a0aae6a19c883d68e743836baec710
SHA1

b086be3ea70b9d6666faf7418473425548daa2f6
SHA256

52430ad27e7d81328ca73a56a7d93fd9fce35b62995f23fca74c9294aaff3edd
SHA512

27755ab9e65d58d634c84d62622df22d03129d355581f4f21a4cee75a16e53d49466ee37e5dcdaf1d3701fdc1bc4e11a7cb12c794ef1a79eb18bf959d23c3aec
SSDEEP

24576:jR1UYjz5z3HEWdqfAWU+Ehc/bytGxNxJh18oW6V:bz/5AWdk8+H/bDJh18oW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a0aae6a19c883d68e743836baec710_JaffaCakes118

Files

11a0aae6a19c883d68e743836baec710_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Data\dev\Sprout\Release\FeedingFrenzy\Release-2.4.2\FeedingFrenzy\Release\FishFood.pdb

Sections

.text
Size: 628KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

GARR
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE