db9f500872711c4818e6f8cafa6b5704_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db9f500872711c4818e6f8cafa6b5704_JaffaCakes118
Size

380KB
MD5

db9f500872711c4818e6f8cafa6b5704
SHA1

5daf70e5627f8aa918546bb3bbf4a3c38ceb0bad
SHA256

268a1e18908429c9c92e9cf658612103f5cd86887a7df8ce9e791b4e33e77041
SHA512

bfbf4f86e4e46633def09cd58c9fe9a2ed3db15f5cdf5bb0a7465303198b08dba44e161ddcf6f510bbac352acf9f940a1e751afaf3894d985ffa51857c681248
SSDEEP

6144:WqcHiyDh9hk2BttW+OuR/VPyOjgsE7quNY2kzJBCW1b07xZ1mgl:UHiyDfSG/XVqOxOquWznvb6X1mG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db9f500872711c4818e6f8cafa6b5704_JaffaCakes118

Files

db9f500872711c4818e6f8cafa6b5704_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ