dab3e39ecbe3d69f1497b39f92abd826_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dab3e39ecbe3d69f1497b39f92abd826_JaffaCakes118
Size

551KB
MD5

dab3e39ecbe3d69f1497b39f92abd826
SHA1

9c6b8d1bf2a2246e6f9f896fc3be079ae1ac2ecb
SHA256

16e1f060454578d624b36283a86800d226a0fa8f33964c43d6a41ef3ecacb1c9
SHA512

85307d3573a5b2f9680c1948983b7c329e9097cbd7c8b1612431906ce4a545b14b983485f9105fb28ea484bdcd437a84ef751e5584d0b7a7a5caf973d9891e42
SSDEEP

12288:wbkmcPE9iF734jFlYqVOHxRJPtXU++4oFhcP4ndKNi56Zj:MgPE9E45lYqV6d+4oscKQgj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dab3e39ecbe3d69f1497b39f92abd826_JaffaCakes118

Files

dab3e39ecbe3d69f1497b39f92abd826_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ