81952a75e99fec8dced60c6dd2312cf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81952a75e99fec8dced60c6dd2312cf4_JaffaCakes118
Size

80KB
MD5

81952a75e99fec8dced60c6dd2312cf4
SHA1

7a511f68b149a8ce6620fa70d7da472931790fd5
SHA256

02ef4ef7800729e78e739bf8c7e8ed8e890cc5aed6fbcba0c97bfd0809f2f31a
SHA512

4e4345c030775f3523a402f2842c28f3ba55db5a2be6b63d8a51284094c55aa79ce9b77f81392ff91ee0ea0c69dd761f579292958ba74ef79123ead4148cdae3
SSDEEP

1536:SQgosHrp6cO16XbscjEqQk1A/XYIqhb3pohfp2T0CCnLhaKyptCN:ngrH4qX7EqdA/AVpohx+tCnd+ptq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81952a75e99fec8dced60c6dd2312cf4_JaffaCakes118

Files

81952a75e99fec8dced60c6dd2312cf4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ