dbf278eec3182bcaa2f44da883a1e8e2_JaffaCakes118 | Triage

Sharing

General

Target

dbf278eec3182bcaa2f44da883a1e8e2_JaffaCakes118
Size

680KB
MD5

dbf278eec3182bcaa2f44da883a1e8e2
SHA1

38a4386c1e9d80845a2cf992113c49ddc8a0e65b
SHA256

bc2942057636a6513d7429a05a5d86a81c374fe3e4eb32997644d94c9c0ba365
SHA512

556ce4df3419225faf1fb0c2845a06bb695470ec0018fb4ada2de78b6f7e21674911b1c6aca4c9f26f5e6feb215cb79fb005bccc43e264a4c0ddba4e12f7eac8
SSDEEP

12288:5M/O/ddRetResReQUH0ErEHs5dkDR3PyZGLxe0DRgLg9H/i:5MWTRetResRetrEHs5WDR3Pymx7DRg8s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbf278eec3182bcaa2f44da883a1e8e2_JaffaCakes118

Files

dbf278eec3182bcaa2f44da883a1e8e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ