cffbd4cb3682c5cc1544b0eb69a9c9ed_JaffaCakes118 | Triage

Sharing

General

Target

cffbd4cb3682c5cc1544b0eb69a9c9ed_JaffaCakes118
Size

589KB
MD5

cffbd4cb3682c5cc1544b0eb69a9c9ed
SHA1

131bb3cac40f145572b62200564fa1b8215686a6
SHA256

d2914c5f6fea5cd79302f3a6957c52d54336714d18bdf9f96c99d67d3a1825f3
SHA512

eb5907f086bd9297d8ab675ede3be4aaf1fa341fdf39c4144b353afe52723f6b91f4c480527c75844ffe66a76ec21f638fef6e5773ded36f787083223c23c5f5
SSDEEP

12288:AlaoZ0IxMFb2QfZ4SwfDhorTfjK6byFgOcKppsRnJbUVk:AlamubxfgDUIciIdUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cffbd4cb3682c5cc1544b0eb69a9c9ed_JaffaCakes118

Files

cffbd4cb3682c5cc1544b0eb69a9c9ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\dtpro-5-0-0316\ui\Gadget\InstallGadget\Release\InstallGadget.pdb

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE