db4c92c5b535cfeda6a7122dcab3f915_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db4c92c5b535cfeda6a7122dcab3f915_JaffaCakes118
Size

581KB
MD5

db4c92c5b535cfeda6a7122dcab3f915
SHA1

6ea0f56de8153568d65382ee9a976f865d828407
SHA256

5318d4490f1644cc0746f67bf8d13823693a1622e705a03c45ed4c0d67651c0a
SHA512

d77ba48f01eef3b49d87005fd9ad710756b35e6cece876ef3b7c7fd7d479c7329e2b985773a5de38f1ecfce18c0ba379865e8a1fd95ca493138feef2af1ba932
SSDEEP

12288:jmnMGFLiQngHwFeR5MIGnUPbdQgu/AIqK3SehqKq/tqcUuEz6pWcTlP+51:jRGJiBH1kTz9q/tqKEzSWcTlPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4c92c5b535cfeda6a7122dcab3f915_JaffaCakes118

Files

db4c92c5b535cfeda6a7122dcab3f915_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ