debcb833c828eac9f673bca153535a07_JaffaCakes118 | Triage

Sharing

General

Target

debcb833c828eac9f673bca153535a07_JaffaCakes118
Size

85KB
MD5

debcb833c828eac9f673bca153535a07
SHA1

70607e56555b3ca49243dcc74970f07ed6c32a9b
SHA256

476c3a59ba0860968127c2a913526893bb4b88611d2d9a3488e115739d048d44
SHA512

c493e1345f2aed1deeed1c9c0556f16d947d278867347ed0209fb2893ec6e24ce55d1e4b492eb0850bb99cdd36b124e92986c016592972b2ac7e7f858d11c75c
SSDEEP

1536:sbVWo8lBn9JUe+0dgiS8nosHsaAGH9+q/bn6aUGMfmKFOeshnpeo1bi0Fszl:sb9+xL8Wn5saAGHgq/jJysdpeo1Gll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
debcb833c828eac9f673bca153535a07_JaffaCakes118

Files

debcb833c828eac9f673bca153535a07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 346KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ