ea631250b5eb9c491cace03754de5ceb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea631250b5eb9c491cace03754de5ceb_JaffaCakes118
Size

98KB
MD5

ea631250b5eb9c491cace03754de5ceb
SHA1

d3dc6b61bfd185b5e3d5524a2dd11f962cfa8fab
SHA256

89a5d497f7cbd2f8cf02e201639853cd56bfcb6e495747548a407c7d78f182a7
SHA512

57b763cf319080a46a3cc16128fa448e9173e79ba7a16f54262a878821b175936f885beb71584fdfb6ed7c947d4efbd895d21c20ff48c8af78193a155ab5f023
SSDEEP

1536:IIqhCwTzseQQmPsUHiCbq3eVsP5yovdtxz2GN4KINA/2HXO39U:qTzd2kUHkeVIRzpYtK/23A9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea631250b5eb9c491cace03754de5ceb_JaffaCakes118

Files

ea631250b5eb9c491cace03754de5ceb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ