db830bb4403594a483f30aba79a2ab42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db830bb4403594a483f30aba79a2ab42_JaffaCakes118
Size

602KB
MD5

db830bb4403594a483f30aba79a2ab42
SHA1

f64ae85dd2fa3f93614a3bf50f7e437f728ba2eb
SHA256

11d213f3cec778d049751d0331e0b33016d03b9a522ae0b79007fcdb80274d13
SHA512

970f09fd3233c6d64e1e2304ec6b41eefa048fb5d1e370a1a254936a4652140e54fea4a151e1e7ccde00399d19cc09dc1ef0dce85710b4e59818c925b22ee2f6
SSDEEP

12288:rVOVAL3TNUNN0ZQSUoy+jIKUSBsPrkqLmpuSxlk00HMfDv:8VOBOU6pPgqorxlknqDv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db830bb4403594a483f30aba79a2ab42_JaffaCakes118

Files

db830bb4403594a483f30aba79a2ab42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

System
Size: 490KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE