2521e69d63fdfb5f202cf8b05bce595e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2521e69d63fdfb5f202cf8b05bce595e_JaffaCakes118
Size

1.3MB
MD5

2521e69d63fdfb5f202cf8b05bce595e
SHA1

95368cb8f5dbae8bf8268dd860ab894122f5a7b6
SHA256

dd4931174454f9d13d2d64869e95aa99b6f3ad3d045270d97724eea2150da0f5
SHA512

3f551ad4f45bb1a2a4cc056c48e76a625b0ec10432a65925b66892f86e7205bf4b95df8f74afee8e634d97303e8a65c74f1920b6dccf9983f84e8d7f0ea72478
SSDEEP

6144:3hIOwOHJOiOtwCKO6OPmQuOHOXZOzOPoKBOkO5twxOpO9:3hIBIbRCKnpQuCUa/KBJEwxc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2521e69d63fdfb5f202cf8b05bce595e_JaffaCakes118

Files

2521e69d63fdfb5f202cf8b05bce595e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE