289d841eac55af37a5f273a9aa5e7a6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

289d841eac55af37a5f273a9aa5e7a6c_JaffaCakes118
Size

292KB
MD5

289d841eac55af37a5f273a9aa5e7a6c
SHA1

128711fed246ca00f33378d0327996b9036a3ef7
SHA256

223e6db5a893f12bb0aa7d189d1470b0a3529ae8ec560d68fef2a33f32bcf981
SHA512

a5a7827addad617e4802d152af1d895f1b5975f71341393ccd8c468dff7bf9780d18c6277123bb39aaf97365c450bfb6daedeab5315cc540846cd9e0c9e21e2b
SSDEEP

6144:nSDBm8ohjD/SbtHX9T5yX1C6/PB+YvdxDEQIW6qvulWDpOmbLV0m1sp6:2Bm8ohvSbtHX9QlH3vuID/t1A6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
289d841eac55af37a5f273a9aa5e7a6c_JaffaCakes118

Files

289d841eac55af37a5f273a9aa5e7a6c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ