acd862b637d56db73eff311ea7094d4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd862b637d56db73eff311ea7094d4f_JaffaCakes118
Size

80KB
MD5

acd862b637d56db73eff311ea7094d4f
SHA1

6db295a186357210e8b6b59123b5ac8c8857991f
SHA256

73f4e327fb8503e97c8b8a3bba05a0467b435097b6849cc2341591b17a9f7022
SHA512

adec03c7f9fcd24050fe7442e1bcc60534aea610cedf19610e3d3b4d8e36502a741518d68af87ba3ee30001bae071f7496fb20dc9a9728d083f5806907f665ec
SSDEEP

1536:M8z5u2CMqqs6aYGMds9rmoJbeDKNrBdUakGaGU:Mj235sqnSrmoJKO9BtDU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acd862b637d56db73eff311ea7094d4f_JaffaCakes118

Files

acd862b637d56db73eff311ea7094d4f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ