000ded5d61d1480debdf73a3047acfad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000ded5d61d1480debdf73a3047acfad_JaffaCakes118
Size

274KB
MD5

000ded5d61d1480debdf73a3047acfad
SHA1

cffc213634799558e08f8a1118433385f6b34bc6
SHA256

2fe4fae61a274db498f51664bd245ab71e9fd0250c4e0c5c51eb844fbef46014
SHA512

5c9d2e5a1d09eb2af166a151858ea35fbecf132beec2caa5e217a256b2a1361ee792dff0ba0a9799d71b02416a64205b4ebb82579a809852196f36d1b42e70c9
SSDEEP

6144:xolSQpHhHu9Ic/yoX1au//bQgaK08TH/eDIBw48y6KvvLR7DbrNT:6lSQpHhHuufoX1au//bQgaK08TfeDIB3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000ded5d61d1480debdf73a3047acfad_JaffaCakes118

Files

000ded5d61d1480debdf73a3047acfad_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ