6f107d2222c81b3068728eeb249bd4f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f107d2222c81b3068728eeb249bd4f9_JaffaCakes118
Size

3.4MB
MD5

6f107d2222c81b3068728eeb249bd4f9
SHA1

dd819c58809763beb8c808149beb5e4822e76375
SHA256

c2f963f9723ff3d77d2b23cb67061e5fbd0a5592aed30231286d6ee6577ebee6
SHA512

58e478d89af8863f4800817c3f553b4a358ac174d24e7a7f21de7cdfbc2ccf449625a24861fde6635b9246097dafb12db2e4d7ba0528e7e4d058a61f7930b722
SSDEEP

98304:N16B9pGVnz/4hplABOFpXlMI/9GAb8nNGlEJeP3:tz/8lABOFpXiI/9GAb8Njq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f107d2222c81b3068728eeb249bd4f9_JaffaCakes118

Files

6f107d2222c81b3068728eeb249bd4f9_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ