dab85a4eef54bd46829e540cccdf4b44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dab85a4eef54bd46829e540cccdf4b44_JaffaCakes118
Size

376KB
MD5

dab85a4eef54bd46829e540cccdf4b44
SHA1

f074be98bf502a4283a33ac2adfe958e711f65f3
SHA256

5b51c5a4bb4bfadf1254ce35ebe3e959d7336325c1db75127a5e512caa26216f
SHA512

5a860c862fa9a1ef50b93807aa1f4050523721dd633e072a951223442f6351d63053d51277ac816b4e33a5b6cbcbe2cc0aef0061f14fc37f5480816496d12d46
SSDEEP

6144:oprm/CM9Pk/gghL4DVX+XMZzpwsLsLMADc27YFVovhr4oEdHjhNwCPGAXXYSXSsa:+rm3M/jEV5ZqDIKX7Zvt4omH3wCeA+sa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dab85a4eef54bd46829e540cccdf4b44_JaffaCakes118

Files

dab85a4eef54bd46829e540cccdf4b44_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ