b5866531fa390e32cef30ff31428e820_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5866531fa390e32cef30ff31428e820_JaffaCakes118
Size

66KB
MD5

b5866531fa390e32cef30ff31428e820
SHA1

16454db7fb04f64a416c8d1b532c43e0884d8b99
SHA256

af2bc9ccfc86276d8971b27d1b4931b4fa14e4a4993d1990a4629b8926a35ec6
SHA512

d35b5c189d44198934e30bba9c688ec3421078a36a71a11c210ae6dc721bb9223d91a06f1666f1a0bd46e92319a2d6e109b83c6da35de9dc78b3f0bfa7da061a
SSDEEP

1536:V5jl/O8pXR3SMMt3pypeDQajZTC9CUIBBjcJme65kdI:V5h/O2h3opy6XTC9ChBBIEe6udI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5866531fa390e32cef30ff31428e820_JaffaCakes118

Files

b5866531fa390e32cef30ff31428e820_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ