db1775d014a8b06d3105ca51dd8b3a97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db1775d014a8b06d3105ca51dd8b3a97_JaffaCakes118
Size

2.3MB
MD5

db1775d014a8b06d3105ca51dd8b3a97
SHA1

0fc3aa78719be029a4a1300912075241ec8de978
SHA256

0259c7c3016d7a98d1f76502ccadd5e331f8a20bbf7b5f8a7c701bf657ae7151
SHA512

be3649660a7d3fe4bc72dc92eb9bf67b58f459ff72a773aa05195882170ffe3179682fa8c3975b2972ea8280618ffa5c06a91821efbead55cad9869aebd70709
SSDEEP

49152:x6dMkyW28x4OK9zGKjP2RCdFScgJu4QTMxG/cxqya9cfcB3e:UdmWbk1GlRCdFScgJVwMY/c8y+c08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db1775d014a8b06d3105ca51dd8b3a97_JaffaCakes118

Files

db1775d014a8b06d3105ca51dd8b3a97_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ