e91e00bb4e561b85522533b9a87a50e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e91e00bb4e561b85522533b9a87a50e3_JaffaCakes118
Size

1016KB
MD5

e91e00bb4e561b85522533b9a87a50e3
SHA1

12268e2b960df0859f03906da27d29141a63ac79
SHA256

a3e59473639f04eb634a065a43b792ced1d00c1b8c69e9378943c53cd44c6396
SHA512

b16cf6036c3922e3da2f227369c8dc88d000f7701fbf0def5d1524ea520719227e15f60c929afab8418ac2781582baa9d3b5205e14d9ebb0782516c7112e17d6
SSDEEP

12288:7xx6fT4NNPzJb/EtQBaYipgIFf8JbLxJ7nUhAZ2oESXery1Q5ejwEmI84Z6OrY:107A7Jb/vQJU1xJDEAZ2Our/AjwtbOY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e91e00bb4e561b85522533b9a87a50e3_JaffaCakes118

Files

e91e00bb4e561b85522533b9a87a50e3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 805KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ