d05a481e5a81690868b7b7d4b44eb99f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d05a481e5a81690868b7b7d4b44eb99f_JaffaCakes118
Size

402KB
MD5

d05a481e5a81690868b7b7d4b44eb99f
SHA1

cf5c38041fe522014f7add566fd0c282ff1981c9
SHA256

cd9e3f6b4773e90d2436b27d91eff7ea0c3b3e41ae9a326b13557e3c2fd29cda
SHA512

227800c9ddf514b04faeaf90e297cc2ddfc8f6cb96bd8c167f962118e6b38528cf9b50a1622edb6e06566aa8db58cb2d5c1c5e91205f22f50e8782fb1cb06417
SSDEEP

12288:/Hzf1lCOM80FnER57hemWxOVCy632yx1AMn8i/ZdaCPbQ1PToPepK6EO:/zjCOuBER57hemWxOVCy632yHAMnbOMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d05a481e5a81690868b7b7d4b44eb99f_JaffaCakes118

Files

d05a481e5a81690868b7b7d4b44eb99f_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ