095899d3a9b700fb38435b642b7cd61a_JaffaCakes118 | Triage

Sharing

General

Target

095899d3a9b700fb38435b642b7cd61a_JaffaCakes118
Size

208KB
MD5

095899d3a9b700fb38435b642b7cd61a
SHA1

0e277cac72e76059823a1ef1e0576d0517566c3a
SHA256

9ab452348de73c20d17d8430e5f09474c3ec9f11b3f26998996bca4f0614944a
SHA512

f920fefd7ea3c87991f1366553a8b7295072367fa8294ae1ed7cb61634a9cfb4aa5d2c11d1c0c06c2dc55dd28337aa3809e8fc718808aabb1a41460d3b26ae6a
SSDEEP

6144:bYDJEoy4nDWgRAkP9YSTLETcVJtPUnF+g+y9rNqV:bYDpvR3P97ScVJtsnF+gV9rNqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
095899d3a9b700fb38435b642b7cd61a_JaffaCakes118

Files

095899d3a9b700fb38435b642b7cd61a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 210KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 288B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 72B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ