fb6f4e2f82b46bb37f46415e7d799688_JaffaCakes118 | Triage

Sharing

General

Target

fb6f4e2f82b46bb37f46415e7d799688_JaffaCakes118
Size

154KB
MD5

fb6f4e2f82b46bb37f46415e7d799688
SHA1

96e0df0e79f1189057b0a68cd57ac5de457777b3
SHA256

b5c6948e9eda7a8a5c4f3105c76f2cbf413d1e4586050ee38757a827acc2b53c
SHA512

ea3a28c27de5716e0862f452bdaf22cd2e47e44e1a80c56c5bb2dbc49457814d985fc168e348db662ea332f59c123b1f7352a62cb5e5830ade2fc71785abddc3
SSDEEP

3072:GgZHhxobnJYbIRcbbwIBGNIZiy6XtvptSQZd:x+7iBokstf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb6f4e2f82b46bb37f46415e7d799688_JaffaCakes118

Files

fb6f4e2f82b46bb37f46415e7d799688_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ