f61ff1f4905d1ac87789977c138ec62c_JaffaCakes118 | Triage

Sharing

General

Target

f61ff1f4905d1ac87789977c138ec62c_JaffaCakes118
Size

258KB
MD5

f61ff1f4905d1ac87789977c138ec62c
SHA1

f7265df698a69a8738c5f7cbe1e82752ba7c9b06
SHA256

9cd79a81eae7e880d5952f4100b2e5969c8f6911f1036392b75a52c5062b147f
SHA512

d54bf4faf6f1348502f7b729197420c9c9e159e659c67efda3ce68942154bac0d497114db109bf3033cc57345de3f6b1b9fd77895e067fe603d7fd0e47f6b428
SSDEEP

3072:er3nLlx2rFGI2hCxa9zZmCXTz2fQODvVEeysbPiBpPEFOqsSqXUnoXTkPH9riU9C:yLQv2hvZmCGdV6wsaAApb9FXpcu+l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f61ff1f4905d1ac87789977c138ec62c_JaffaCakes118

Files

f61ff1f4905d1ac87789977c138ec62c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 345KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ