0fd5047e8b931779b57963d79d8039e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd5047e8b931779b57963d79d8039e6_JaffaCakes118
Size

89KB
MD5

0fd5047e8b931779b57963d79d8039e6
SHA1

df4c019eff442091c09a66983d4ac0778cffa8a8
SHA256

e0a2aca5672c5a10e42807fc669c7911046d22746d3e3f4d85193413490cf17e
SHA512

23a4cbeaf22a612e61b04e3485bbf6766442e3802a2201d3ad494ecb183eb3b795555c5255ec06488d18685f2f48b73e1074e2a482e4fb26d65cd9684ed81156
SSDEEP

1536:ujqjoQH8uxLxVGip+gQSzWvCtvgI59uvwTcic4zL0LWWSNBUJ/oZhEx9:totq/ygQkWqtvgg9uvwTjc4zL0LWpNQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd5047e8b931779b57963d79d8039e6_JaffaCakes118

Files

0fd5047e8b931779b57963d79d8039e6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ