043d06895d6f9b0a48fecbcea9b08426_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

043d06895d6f9b0a48fecbcea9b08426_JaffaCakes118
Size

219KB
MD5

043d06895d6f9b0a48fecbcea9b08426
SHA1

b6059a3b2b960efa878cc061f491086737721cc6
SHA256

f237511a92f373c799f3ac47a748b5689f4065c95c0838908354016ad2f67311
SHA512

1309a0b4c0977bf2eee4e22d9311d24eb4fa4e2537e77d97fa52327924b1853d3805c7a7ce8ef5fa148b05431be676ec7801d7ec577ec6af7b9de0b1620173ba
SSDEEP

3072:x3v0qJZyl4HhvtVGx7VsdfcKbeZQiedDtDRRCCP+imVZzZhO5BJtp6S5cRyQRj8r:x3vyuBVIx7/Ci0DECP+nVQJtpxcV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
043d06895d6f9b0a48fecbcea9b08426_JaffaCakes118

Files

043d06895d6f9b0a48fecbcea9b08426_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ