dbfc4334e7b13e44a04b7b48feea54e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbfc4334e7b13e44a04b7b48feea54e1_JaffaCakes118
Size

521KB
MD5

dbfc4334e7b13e44a04b7b48feea54e1
SHA1

18c07d82199cabd73b29dfeed5cfd3c17debdbc2
SHA256

d6cefe289861965001c15400f36e559ed0f618051a93b1fe1ae0c5c272b54797
SHA512

1e25e463c37337eec29740c5e2c033d3d2acb4013bf753d73d30d63e2e8d3f08f85513c8dfce3101e4e3c23cfe9c2c13673b599e17268f5af4fa934af97c82a0
SSDEEP

12288:udnkHLFpcWC3KQqyWZ0ys8SgVaaXRuY3JL76AaImIUnsFcbFqDdbMCXYC9s:WnkZpcWC6Q1yyVaXv3t7NaImIUTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbfc4334e7b13e44a04b7b48feea54e1_JaffaCakes118

Files

dbfc4334e7b13e44a04b7b48feea54e1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\bld_area\InstallToolBox_r6.1\bin\BIN.IRU\MiniStub.pdb

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ