dbe6c92a75d2e370256939bd5103945e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbe6c92a75d2e370256939bd5103945e_JaffaCakes118
Size

305KB
MD5

dbe6c92a75d2e370256939bd5103945e
SHA1

c66590ceab76c43046e2b6f8ba56e3af3efd3041
SHA256

99c4303f9841947b320cd4350df6f048d94147fd84c9b1c0b54f508c273010af
SHA512

6c47b9e7cdc1423a7c311cfaee737eeadb82aaa45011edc9ed96e95f48435b0f761c3924285ef42ef45164d358a2d7728d5f39bfed2ca78205f39b7e610d2f87
SSDEEP

6144:DbANbYI+MHObD8hNS1EwyXXUdjdvaAqJf:Ds9YI+MW8Iy6Ja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbe6c92a75d2e370256939bd5103945e_JaffaCakes118

Files

dbe6c92a75d2e370256939bd5103945e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

GoogleUpdate_unsigned.pdb

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text/DE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE