ddb6e8ae09851238301d2b454ddd804b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddb6e8ae09851238301d2b454ddd804b_JaffaCakes118
Size

714KB
MD5

ddb6e8ae09851238301d2b454ddd804b
SHA1

dbb4873412242ef95ab8103ab5f24ba5c635f2e5
SHA256

b7d94436262d3bc966520cbdf1e34194b25d158036c42909ac760f8bb6e3f86b
SHA512

e0530c4e7e24d64c6571bb9c91e8e65dec20f8fb1599da27143091760ab418551126d8b1ffaf1bc24d4b1b1564d3dac26ce13008ef5bf409a4f602bcda27d16e
SSDEEP

12288:PsygFeF8v9WtDo3gsEoXYkTPkW/BRXjIjTtj0:PtnUYtagsEoXY4kkRQ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddb6e8ae09851238301d2b454ddd804b_JaffaCakes118

Files

ddb6e8ae09851238301d2b454ddd804b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ