06f1b0083af08f8551c596f4efa36aa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f1b0083af08f8551c596f4efa36aa1_JaffaCakes118
Size

1.9MB
MD5

06f1b0083af08f8551c596f4efa36aa1
SHA1

e36ea7b03879f79b22e4c80e6a0ac1b23097b2d1
SHA256

1ea09cf3e057d9c68a8045165739492698f14054f2e77253968e68f600f16443
SHA512

f1a2d67f9afedacd423da9188ada411c68730bc023495d200f2185703f3593de4b58aee9fe81a1905af0c4cd5edc6fd119a6a13fa9bd406060e8cbf9a689e531
SSDEEP

24576:bkm/ITi3EoMI2PepB/K2xBknI7YkziXaT0Fuq49DKva2f9/7dqNPgRNyacq5Qhth:b9X4q/vGWT+XB/9/YAcTofwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f1b0083af08f8551c596f4efa36aa1_JaffaCakes118

Files

06f1b0083af08f8551c596f4efa36aa1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ