0a1e08ab193b9e219e645959baae15cc_JaffaCakes118 | Triage

Sharing

General

Target

0a1e08ab193b9e219e645959baae15cc_JaffaCakes118
Size

80KB
MD5

0a1e08ab193b9e219e645959baae15cc
SHA1

b55722042171151e7cc3680b086d5d97c5858ccb
SHA256

3e9a702bb6f63bb6f53bde40c61b27e645b32fcfc22ba6b2bd86cb9892d85c65
SHA512

bf375c922ef9ca9ddf667a3dbce35373db6d345901ad9ade93cfcb5afb17dd656699d26e02a77bdfa00b8c01f546d47cf3e8df81a46686e583f4f5710a25048b
SSDEEP

1536:vkLciCBVJ8BrPK/WPcIMeitBNZfQZ/uiQ0WMWMN11arJ5qjBgQGfC2b1dVC0CGj:vkL7CBVJiPK/WQTS/s0WMnN11i5q1qa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1e08ab193b9e219e645959baae15cc_JaffaCakes118

Files

0a1e08ab193b9e219e645959baae15cc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ