dbfef82cbdee695ab08cc730680900ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbfef82cbdee695ab08cc730680900ed_JaffaCakes118
Size

2.2MB
MD5

dbfef82cbdee695ab08cc730680900ed
SHA1

ca2addaaafe2c0b81b066dc91953e1b1d4a50b9c
SHA256

e6292bbfee3850bbf33091557b2ef13e7eed6e982b6531a264465e816f402717
SHA512

6b58e8ecda2efca31c34c1d6536a3c0db9e7a2f5a280deeb22499dd3e8eb379f78c48007a5edb7a997a3efa12ab8271e0eb8e6af4c15d1f2d8d0ffc4d5b858f5
SSDEEP

49152:C9IRSRXMHrHzoLSMxcw9WXL/AB/zijNEPGH0goHT6o6TZj6cGpf8:MIR/LHMLSskEcJEPGH0gCWo8ZjU8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbfef82cbdee695ab08cc730680900ed_JaffaCakes118

Files

dbfef82cbdee695ab08cc730680900ed_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ