048c150c8528965ef0902607e5b908b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048c150c8528965ef0902607e5b908b4_JaffaCakes118
Size

267KB
MD5

048c150c8528965ef0902607e5b908b4
SHA1

eec1196d7bd6a825f1ed87086080993e6700ca8d
SHA256

ce827a74495165773f935f6f1d1bcec141f519e5eafe7dbcaa0a33840a422972
SHA512

a1acf6c55035afc078c06919627b712c2cbdd385a96858331cd99aa1d51bb741589a184a10e4b1ddf16729207d48f911a4078731f83a5dd2e4facd3e11c464ec
SSDEEP

6144:xefdktYeJYTqeWxABDsgiEOf6+iOTKJEJ:xMktxWWeWxAOgvOD+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048c150c8528965ef0902607e5b908b4_JaffaCakes118

Files

048c150c8528965ef0902607e5b908b4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ