0fb1cbdda583e93352581f2354cddaab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb1cbdda583e93352581f2354cddaab_JaffaCakes118
Size

347KB
MD5

0fb1cbdda583e93352581f2354cddaab
SHA1

152274049b8f5b7514d9b5c784e02d9163f98347
SHA256

2718344534422c0ab6df1c7e20f2840cb6dce19b48f02b9a0a1a5eb279cbd136
SHA512

08f4a8e40b7ab76906dd434e171d8942348617877b189f7834031747d39848cd90a9f8c63e5f3b6f12022b8b96c717b94379a1806669b69ad9c2c81033374ec0
SSDEEP

6144:W8+jWfuNvs3aoOYmnB2fQ21pjRfs67FaD4s/GPhdune1OBcxFizS1oD8m1oi:W8+jWfuN037OVB2ffRRfs6B+4cghdkyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb1cbdda583e93352581f2354cddaab_JaffaCakes118

Files

0fb1cbdda583e93352581f2354cddaab_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ