002906a11a5f5dab64ebde8211d9e1b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002906a11a5f5dab64ebde8211d9e1b1_JaffaCakes118
Size

56KB
MD5

002906a11a5f5dab64ebde8211d9e1b1
SHA1

bdd741bf73f46112d36c8547b460183d4306c42e
SHA256

e3eeb86b19bbb1b48bc4ac9044e5ff8246d8c81e7af8ffee78ad431abdca4409
SHA512

ed9e17299c8a997bc806534593d0f8cb2f32c506490be0fd875a675e26ad6aad860c1ab1587cc117eda5a1a812e7043256c426314cc66940c486d685fb3472ae
SSDEEP

768:haFaksG7ZsUPSf0FPLZ58fjoBz/0MSgDSkM1nsO4iePyJX7biOn+2/Hi+MKdRIg6:lksmsapPV5ksdSdh1sGNfAERIg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002906a11a5f5dab64ebde8211d9e1b1_JaffaCakes118

Files

002906a11a5f5dab64ebde8211d9e1b1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ