309a39277d7b8cf21b458d37b76836c1_JaffaCakes118 | Triage

Sharing

General

Target

309a39277d7b8cf21b458d37b76836c1_JaffaCakes118
Size

294KB
MD5

309a39277d7b8cf21b458d37b76836c1
SHA1

41504dd90313ec5f35631170bda2f21cab33fd5d
SHA256

f3d965f9bb848bdd649b9927b56dc5ffe822f7023475e09f5f3f5a8d1bcffbc7
SHA512

83010112a5d546fbb55306fea8a04f4addb46eb0a91edaa68944a1b69af72ec248b48d3d8d4fb9e58802d6ac7f2005a6632758fcb6c73342ba3a099028061caa
SSDEEP

6144:2EaWgIP4rdsk4adS6g+Eo7DArglSAU5q84Na6jX6giUtD:2jWp4rb4adY+Eo7DmQSto8u3T8qD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309a39277d7b8cf21b458d37b76836c1_JaffaCakes118

Files

309a39277d7b8cf21b458d37b76836c1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 256KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ