dba80f46e4040bd03cda9d5414f62422_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dba80f46e4040bd03cda9d5414f62422_JaffaCakes118
Size

250KB
MD5

dba80f46e4040bd03cda9d5414f62422
SHA1

8af464523ec6c709e79d08118f7cca4a5861b0b3
SHA256

794e86b29eab09bfca25d85085c43083268038c2cd825744a134ccd80387c058
SHA512

505004fd035321d75b24890519895a035c648e9bc10dc9f274d77c2c0ca81fe5057c5be79aef6d9e2aad74cdcd133ec03dfb63cd570ec86c2318107121027f5c
SSDEEP

6144:KSum9CCP+zBNo0GeJE5HF+GMXJDPNhcTZT1cACTfgjdlA:KnVRvMeJE5ZABPNhyR1kfgjdlA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dba80f46e4040bd03cda9d5414f62422_JaffaCakes118

Files

dba80f46e4040bd03cda9d5414f62422_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Giga5
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ