f2d6c34bafcb563cd40320410c42d3bc_JaffaCakes118 | Triage

Sharing

General

Target

f2d6c34bafcb563cd40320410c42d3bc_JaffaCakes118
Size

559KB
MD5

f2d6c34bafcb563cd40320410c42d3bc
SHA1

5d43a07399993e0ba99f35d0685da4d03f1cd40c
SHA256

f39f9301563f9595f35d5c49673040f79231c6bfb37bd660585f6a4405f748c8
SHA512

c80a01232efadc29632dab31f2e409fd9b980a30b00e2abd3ce584e31d19b30d2cb59f6496e7c2cfc48e2bc38e55760c3e24fec483e28997942ccd9484a11cb4
SSDEEP

12288:GXbLChDa1XtY+9+/jOq+KGgpUxOISdT+l7h:cbWmC+QrCmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2d6c34bafcb563cd40320410c42d3bc_JaffaCakes118

Files

f2d6c34bafcb563cd40320410c42d3bc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ