ddb8bf61b96d7b5322b02390c7723f57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddb8bf61b96d7b5322b02390c7723f57_JaffaCakes118
Size

385KB
MD5

ddb8bf61b96d7b5322b02390c7723f57
SHA1

2f99a702f2f5006edb263a41b40a93e871a4cc8e
SHA256

6107b92eabdee1d8fa05bd191fdd146de18d9cb04916a43ac8a036377ae2efb0
SHA512

98e2a34d5c6b31f94ea0ea384660a0a2622d78c2288ff9db5c4231b691c2938d80932bffe33038285e5c3127d7045b3189dc1e64dc57051f1a0bd2589ea28360
SSDEEP

6144:yTO/1L8ahPI0VaSF6QTBnV5BoMTbmlIEngo0+8yuiUjHi9W8Tw29tjDLD:EkF8Aw0VsQTVBoMRE+G9r9tjXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddb8bf61b96d7b5322b02390c7723f57_JaffaCakes118

Files

ddb8bf61b96d7b5322b02390c7723f57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\PPStream-Vod-Work\XSearchNew\ppsvod\PPSAP\PPSAP\Release\PPSAP.pdb

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE