dbbf02529f59394436374c0a73e6bada_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbbf02529f59394436374c0a73e6bada_JaffaCakes118
Size

5.7MB
MD5

dbbf02529f59394436374c0a73e6bada
SHA1

bf066f586efc133e586f5843abc099ee404b7778
SHA256

0af280491ee19f7dc8611d5db09c09875719d55d2b30ff78dbccb1bb6644249c
SHA512

5d2bda4d7efc8fde9a1ab61f6b062ae03f5afb37dafd5d217bb781407568e7bb9a02da1b485a9d42c6764c1e904971d7c10167cb57c2c1f0c53f68acfea53881
SSDEEP

98304:N16B9pGVnz/4hplABOFpXlMI/9GAb8nNGlEJePyobKRZY8eXJBM5x6MdQ2sLmaDu:tz/8lABOFpXiI/9GAb8Nju8P78G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbbf02529f59394436374c0a73e6bada_JaffaCakes118

Files

dbbf02529f59394436374c0a73e6bada_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\php-sdk\php56\vc11\x86\obj\Release\php5.pdb

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ