af293c966edb824c862ba6d4295dd408_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af293c966edb824c862ba6d4295dd408_JaffaCakes118
Size

69KB
MD5

af293c966edb824c862ba6d4295dd408
SHA1

343db456af5ac2f66adfaf2854b9c8f8533f10c2
SHA256

6eb9887b960473d1f71afe1436d8f861c9da5d035cf8afa2610c429e0a50b62c
SHA512

48d942ab722d2a8c12e4d68d043d4a43dedd2d29f2d195d6619909e3ca03024135870442b86489ee08fda69e7f27fd525a577d5e16a7c1a21e9e1328be2371cd
SSDEEP

1536:nzKnRDKcfO12UwnXgAZZehU8cGTYcoDdJ7fGb29FL:zKpLhn/ZZIUXSYcKrfGk5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af293c966edb824c862ba6d4295dd408_JaffaCakes118

Files

af293c966edb824c862ba6d4295dd408_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ