d260d148f8807c5432c8181a100ff2ad_JaffaCakes118 | Triage

Sharing

General

Target

d260d148f8807c5432c8181a100ff2ad_JaffaCakes118
Size

8.3MB
MD5

d260d148f8807c5432c8181a100ff2ad
SHA1

8583918d0fe71c2b20fb9ab545a19167565aea91
SHA256

73f520223a2e01c036a4b620c7188e733c113a429e25c5c3de7fbbc1c3d16ccc
SHA512

3966ab0536b59ef994c7bb04900de4519c8e9a168fa9e8c8e53ac370f1b992f6bc1e4786d31be11c9f8cdcf46d198f4abc896c5c66a7a4084cbb2be28e456617
SSDEEP

49152:F4VwASOwGtlqOhIU6i5H7teZtsDFc9HSgm7inT9p53PPhk+y94faa57HarYhu+nF:cW+k3E7iZXbteQDm9yOuLns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d260d148f8807c5432c8181a100ff2ad_JaffaCakes118

Files

d260d148f8807c5432c8181a100ff2ad_JaffaCakes118
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ