da674d4faa458f7772f31f050e22c3ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da674d4faa458f7772f31f050e22c3ea_JaffaCakes118
Size

1.9MB
MD5

da674d4faa458f7772f31f050e22c3ea
SHA1

e0d29f40b0e6907d00a830b196156e10018c0287
SHA256

2d3f1362810906bf0522a3d0f4ff1400adb57539169f1b32b9dee249e9feff77
SHA512

8a3a3ef5be2b91c2579877b9910f298c05ae5c4739debf0f4b11a6423c4e471464589b26a48d63ef62a55753a0ce5cc8b7cb16a9a15734c9f901f492cdd17a1c
SSDEEP

24576:lkm/ITi3EoMI2PepB/K2xBknI7YkziXaT0Fuq49DKva2J9a8ddjUDiuyxPQSKzZx:l9X4q/vGWT+XBp9a0jaQQScrg3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da674d4faa458f7772f31f050e22c3ea_JaffaCakes118

Files

da674d4faa458f7772f31f050e22c3ea_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ