787aae699d56b58967e5b537bf24d4af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

787aae699d56b58967e5b537bf24d4af_JaffaCakes118
Size

1.7MB
MD5

787aae699d56b58967e5b537bf24d4af
SHA1

9cdc7a71b9d2881f1f833fceeff67f3df8395474
SHA256

9c62633916b3de6b6432a1a274b560a1554f12cc1cd6436c8c3da021a5bea2bd
SHA512

3aa3e1ef22f75f84771f58f5b49fe8fdb08a4bb7e04f68ffb1645421b05d757872a2b7575f3faa6096c59ab23c095be59d00a848c62fd0b37e8d516fcc85a8ce
SSDEEP

24576:eN9HTirP6IiLTh8Lxa4vz2n4qNPQBE4l8Q5T/ZXOTnDyvsJ1wfNKxARgmyl7c:YQ6IiHuNvz2nTNPQV5DUJ1wFKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787aae699d56b58967e5b537bf24d4af_JaffaCakes118

Files

787aae699d56b58967e5b537bf24d4af_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 994KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 675KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 42KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE