f900a8b1c6250da4c6458fc7eebb6352_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f900a8b1c6250da4c6458fc7eebb6352_JaffaCakes118
Size

158KB
MD5

f900a8b1c6250da4c6458fc7eebb6352
SHA1

cd3cd6ed4781c5b6771d6ef73f1b23f592405ef1
SHA256

ebc1b2dce80a7ddcf825ee1f3d59f140923bb9e3cc64c9bffc3bf2e586dbaa48
SHA512

c24bceb0dab436b6817a3a3a08812cad5247588217d883d5b6f124773fc97e4a1ce544a76344bfa6c93c5cab910b7348492c82f82552c836712ab493a2706896
SSDEEP

3072:3VxN3yvljn4Arm8zHR2C9xCKsxBmwb7pt4nUN3Du2Kj3Yb:3HN3yNrvrmaxC6wb74+3DuvI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f900a8b1c6250da4c6458fc7eebb6352_JaffaCakes118

Files

f900a8b1c6250da4c6458fc7eebb6352_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ