f43e0fad34410bb77215f080298a2ec0_JaffaCakes118 | Triage

Sharing

General

Target

f43e0fad34410bb77215f080298a2ec0_JaffaCakes118
Size

546KB
MD5

f43e0fad34410bb77215f080298a2ec0
SHA1

ae6c38a391b773c6195ca5682e0c1aca919dea18
SHA256

3ecc6d8b7df89c5bb8492157f13576dde90c58773fb4eb22cb5463e1bf2b4f16
SHA512

d92b6142d3074f2fb60f482c522e7ce8114e60e0ee7d1cfc0beae8a302fe4e911d376c2a86c48233763de14440bb0c9936b1f92570b2ce7380fae1dfa4556c60
SSDEEP

6144:39ZLk6KDpBVnwU47/cadCW8/Sb+YvLrhk1dlm7twdWgGJSfAEIsj7kBY1vbrofnL:tG6+rnwtvQAucxWjZnkBusPkni0yShg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f43e0fad34410bb77215f080298a2ec0_JaffaCakes118

Files

f43e0fad34410bb77215f080298a2ec0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ