db7aa954c6c9e342eecc1d48695b754d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db7aa954c6c9e342eecc1d48695b754d_JaffaCakes118
Size

80KB
MD5

db7aa954c6c9e342eecc1d48695b754d
SHA1

b964d9aa91e6ac14a2e0c38c10f0d3f6fc35b311
SHA256

2fcd70a1f0eb5a857564a0e41ab5e78c0362c171024b73d5c022a54101206b64
SHA512

f56970fb8bb86cb7caa4aff4dc782bb4d239f06ba6b2b0814d370d254cc8104a16f95cb49dff6315fd6f02c916560b241c89a27f8f311cf3bf972615fae82faf
SSDEEP

1536:gnpilGnaooRlevPHQOK8gTKAMQRevpBmY0DQ7LhKvbyV6kGKKSIHEWc:CzaTLObgTKpmhD2LhabyV9GJSIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db7aa954c6c9e342eecc1d48695b754d_JaffaCakes118

Files

db7aa954c6c9e342eecc1d48695b754d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4080.0MB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 333B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ