dabb3815ee4f9844a27ad57f4c9831f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dabb3815ee4f9844a27ad57f4c9831f8_JaffaCakes118
Size

96KB
MD5

dabb3815ee4f9844a27ad57f4c9831f8
SHA1

7cdcb395e5b4fd4a8c568dc70406da39a30f7181
SHA256

69adaf620213bf87025f3c3c2f9788b53710fc570035f2c59702d602ff7d8f78
SHA512

ac74acb2a543a7488794552a710923ce885215173c65209889f77072e3622a4d2ad4d14fa6aa5c9ead4bde94d9f4bbf5f996e7b82c619edde23bedf4261ebe85
SSDEEP

1536:x9ApP5rRh+VdX0t4JbkK8PL9fYBFlAHDDm9VTfl99Psv4ytc6LouGc3boY8BBhBD:x9ApPDhwJokbkK8T96iDm9H976L2c3bM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dabb3815ee4f9844a27ad57f4c9831f8_JaffaCakes118

Files

dabb3815ee4f9844a27ad57f4c9831f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 29KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ