ed2656d94ab1308cb356b1d74a4b2be6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed2656d94ab1308cb356b1d74a4b2be6_JaffaCakes118
Size

647KB
MD5

ed2656d94ab1308cb356b1d74a4b2be6
SHA1

2d27fa1397a884f72110a93d0706a0eb48a56186
SHA256

02ef2222c32eb4be3b9bc5981cb18e8d3eb540a43e5254303b9230bfff111f1b
SHA512

62c3634b53e00ceab323e231e68a6e5a9b32065434244734916cc2f375228ead7df846d382aaeec8ca435dd0e7f5fb27e8e4d9a85dcb3bf223a0c71e32dfc7d2
SSDEEP

12288:cHv9BczP5RnMW5AI6sV1x31duhUfiY0g+xr8GUGR/w5swmvmsimQ4u6P+:cPPc9RnMW5AI6s131khY0/xYGUGFvms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed2656d94ab1308cb356b1d74a4b2be6_JaffaCakes118

Files

ed2656d94ab1308cb356b1d74a4b2be6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 531KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ