00a9c7baea26cc6344a008427fb1dc2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00a9c7baea26cc6344a008427fb1dc2c_JaffaCakes118
Size

1.9MB
MD5

00a9c7baea26cc6344a008427fb1dc2c
SHA1

741b468ab74d54cfb52769766db1b5a3dcaaa002
SHA256

57c609646ba74080d498e45e4c3dd6d07f706a30a7671e21bc7a834fc7de49d0
SHA512

7a695faaac72fda0004208e0ba192cb439423622c4365e86a7ea1d77b0ffbc46d9d96efb0c7626ab8ad4ea21c1c490083f61c16cf131b7564db4e5ce2ffefacd
SSDEEP

24576:4jQII4bcygW7fviDD7q5QmB6Jwav6i5L24xHoPEECvrqsmY9:4HcyjnY78QI6Z5a42PErqu9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00a9c7baea26cc6344a008427fb1dc2c_JaffaCakes118

Files

00a9c7baea26cc6344a008427fb1dc2c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ