09c9b88820faa1623a7eb43d1774eb1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c9b88820faa1623a7eb43d1774eb1e_JaffaCakes118
Size

160KB
MD5

09c9b88820faa1623a7eb43d1774eb1e
SHA1

d016b610c1dab0e88ee0d3ec07d56745fc5c436c
SHA256

4119094a1002db50d7b9860be293e46ebda5cc9d7bee070791b2b923fe053c7d
SHA512

e15498c358fa7bd8ac560b927049155aa13167f8c44932d7b3e03c2304efa66d07515c43bdbe1920389299ff35fb2a3db68390c1acb2a167b9826b350910758b
SSDEEP

1536:elxzqfRmPfQtYNtIy6dXxE/V2TsDCJ81hQq/BAEmTt4GrNntEF5LDUcUGWunZ5Sp:3/yChlVGGfbquX7wq5fMG5i3uJpcPpVe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c9b88820faa1623a7eb43d1774eb1e_JaffaCakes118

Files

09c9b88820faa1623a7eb43d1774eb1e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 827KB - Virtual size: 826KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ