054b8f8f5bf85fa81ac33805859471f0_JaffaCakes118 | Triage

Sharing

General

Target

054b8f8f5bf85fa81ac33805859471f0_JaffaCakes118
Size

107KB
MD5

054b8f8f5bf85fa81ac33805859471f0
SHA1

116b9a0066f3492c7b9f43263ad2e42caed93742
SHA256

db4241647177d36bbd1c76d4632f8f9d9668e695ce13adbf1c59bfe4863694df
SHA512

8aeb6b88545faa277610e6851afec6e7b23181be0184bad745824e200c667de05b6b70b930e3841725f23a8345dbb3b28262b051a92efb15d27910a52361a3b8
SSDEEP

1536:zeJaMquD4hWKMq2jutq7GC5BJcfxgXTimV5B+sV3pd8RJVl5GI/wzxElmI:zeJaxMqf+oq7xJbvZdek5WlmI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054b8f8f5bf85fa81ac33805859471f0_JaffaCakes118

Files

054b8f8f5bf85fa81ac33805859471f0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ