09059fd13b8b6045884539408f8a8c72_JaffaCakes118 | Triage

Sharing

General

Target

09059fd13b8b6045884539408f8a8c72_JaffaCakes118
Size

16KB
MD5

09059fd13b8b6045884539408f8a8c72
SHA1

0d28b4d96b3b8f3c5e736927e399f0cc0b24e8d4
SHA256

f2af17e02d3f2e0b3a2e2e984c259467701a4d2570f8e88da0b3f1047340aaee
SHA512

f50c05bf3d6d081dea404249df517354965936de85ce6e4464e91e462b1433e4c251935339b3c15db803b42d29ced0282f5ca909f7100e16059d31072ddbfbdf
SSDEEP

192:nWa3PoYYhUqxAXl4pYKUHNyJMevcMQbRJDmRIAJWa6TKbHHlM94s:j18YoJ/cMQbW6A8RT8ML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09059fd13b8b6045884539408f8a8c72_JaffaCakes118

Files

09059fd13b8b6045884539408f8a8c72_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ