ece66580a0f6e858ba9120ac4558f689_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ece66580a0f6e858ba9120ac4558f689_JaffaCakes118
Size

240KB
MD5

ece66580a0f6e858ba9120ac4558f689
SHA1

9694682cb01ee45a92a39c02e65e1dae05d2bc19
SHA256

585decc9cf38b5472304adf45f416d760d505a30ccdaa68615f957328eef9ba2
SHA512

f3d52dd32a5bfbb2eb1bec4069721ff729b5bec477926a6c699fbcff6264fde559d18ab78aca634070edfbdf447c1c2de670b4f416550fa6d0f33de9e66e4af8
SSDEEP

3072:Dbj0xabjkvoV4W85koB9jI4S11VIa/9eOBDDEq47b7K6U8:L0xavkvoix5koBBI4gtDEvfK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ece66580a0f6e858ba9120ac4558f689_JaffaCakes118

Files

ece66580a0f6e858ba9120ac4558f689_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 211KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6.3MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ