01a3f1e8608c31507684226c27092cb3_JaffaCakes118 | Triage

Sharing

General

Target

01a3f1e8608c31507684226c27092cb3_JaffaCakes118
Size

47KB
MD5

01a3f1e8608c31507684226c27092cb3
SHA1

38cafbe407278b260940a2dce9d504c342e85a21
SHA256

ecb04ce2dde9fe76279c355a6632216492148fe1d90c3d5a11562d0e42b04420
SHA512

91f96295e5262163410f1eb6c57de5c2edf746cc94c6f3c91e3dfd9fc3559966b523873ec387cc49cff94d4d5f9d89cddf5fce566782a7ed271e8e42ecb88dc2
SSDEEP

768:DSnMqulsz6iAA7r4Mqi/AdzCvRlLxA9uk8MAzDhjSWT+6Fy:WnMqulsGiVAZCLCILFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01a3f1e8608c31507684226c27092cb3_JaffaCakes118

Files

01a3f1e8608c31507684226c27092cb3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ