2463a85d160fa842ae5e1187e0e5c3ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2463a85d160fa842ae5e1187e0e5c3ff_JaffaCakes118
Size

280KB
MD5

2463a85d160fa842ae5e1187e0e5c3ff
SHA1

e272342301d65465e33ebb11384012c1e0036211
SHA256

e881b35cb20b712b02ed50a71c6bde6c59aaf4ad414c1ed61d16df3490cbfe22
SHA512

7564ecaeafd5ddb19276cdfe0be79d42f543453262b48a89dd902f714379a539092ecdc90967bf211724a8733900f03d7b5ef712e8364a1846f287a515979c8e
SSDEEP

6144:GErK4k/3sJH6iIfIGOS+3NuICjkDm8V2YwnwoUYvTJs+pR:GEEcJH6WS+3NGkDOYwnvrTJ7pR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2463a85d160fa842ae5e1187e0e5c3ff_JaffaCakes118

Files

2463a85d160fa842ae5e1187e0e5c3ff_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ