f6024ed46b3caa2e51f9e21efe3a5c8e_JaffaCakes118 | Triage

Sharing

General

Target

f6024ed46b3caa2e51f9e21efe3a5c8e_JaffaCakes118
Size

63KB
MD5

f6024ed46b3caa2e51f9e21efe3a5c8e
SHA1

95047db4291c959b308b8d9cebe9a4354e534209
SHA256

844dffbca78e4b272dc183ab4a541eebcd8f4c27cf0b43d3b428e922c76f792b
SHA512

1afa825a380046a6902fcd2e9bd9476f3f8f37d5068f9e7dd14c2a9e011dbff1a2204f84160f25765d1470d26e5db84fdc4e6da6bbe99942a5ffdbb55c0e1e63
SSDEEP

768:pM5yt55gnAU3ATCjMAWxLe8aiLkloCkOyRMnyAmSfJAHbjK7xt6Bb24PZLAaI28l:pMOkOCj/W/brOWwmgJAqvIRA2wcA+dy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6024ed46b3caa2e51f9e21efe3a5c8e_JaffaCakes118

Files

f6024ed46b3caa2e51f9e21efe3a5c8e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ