07397a309ca39233e1db169c3e620b4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07397a309ca39233e1db169c3e620b4d_JaffaCakes118
Size

112KB
MD5

07397a309ca39233e1db169c3e620b4d
SHA1

a94efa527ff2985ef29f943649d485c0dd09de70
SHA256

1cf430d84f4c91ac813e597a317a7554b8dd20d5520fff4b6a65dae343bd2110
SHA512

d418c8de6c41b48415199e2a3b3e2a8c0e544571ec6bb87aed2016240099d7d97730c9555b776b2567a8d213d620f54123e1275b17ee73a99c70179de3f3576b
SSDEEP

3072:fsNZwOM8uCQPNgfolzHS/ZOkXjvKaB1jiG/dn2r:fqPduCQFbJ7GAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07397a309ca39233e1db169c3e620b4d_JaffaCakes118

Files

07397a309ca39233e1db169c3e620b4d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ