9034a551ec4e640969f0328e462c9301_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9034a551ec4e640969f0328e462c9301_JaffaCakes118
Size

149KB
MD5

9034a551ec4e640969f0328e462c9301
SHA1

58b8aead490ba29c2eb29f5017048f70645ee303
SHA256

915e17e1095167a9c4ea07b465fa98d3ca8d56ae2a2c8cdc038237a745deba12
SHA512

c29c26b129cad039140bcfe1b0e67411251c61911cdc9a9a32985aa50e7eb39aa160db8a663871643be3ce73df2b3722467a54e7688222481e4ec4de4df79c65
SSDEEP

3072:oCCtQW5+WfhfSl0tyEoYkvIak6dEjtAXkNFn/uke2l:oCUQa+i5sI/+Aak6+ZA0Lpe2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9034a551ec4e640969f0328e462c9301_JaffaCakes118

Files

9034a551ec4e640969f0328e462c9301_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 110KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE