03755fea5fa3968cc93e6aa49aef269d_JaffaCakes118 | Triage

Sharing

General

Target

03755fea5fa3968cc93e6aa49aef269d_JaffaCakes118
Size

220KB
MD5

03755fea5fa3968cc93e6aa49aef269d
SHA1

01bc3614a4de3030c278192dd2b1bd56a92f07b4
SHA256

c776565c6b6e86f5a75355c6482f1d01b5c602621e45ad5066070d2850ec499f
SHA512

41c6f072990f160c292452dbc08b2e0bd6283a9081b36a2cf36568351d8efe76de5eb1e3f4bfb98c95cc4c76a16409d4a9220e309bf5cdf48f85512e35d9a3fe
SSDEEP

3072:QpdUGSiJ9Z3Cg6tEPCco7gGNLnJhnRWX:QpdUGS098UI7RWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03755fea5fa3968cc93e6aa49aef269d_JaffaCakes118

Files

03755fea5fa3968cc93e6aa49aef269d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 892KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ