0c95ac2f177e2fb13ccc5950805bfa83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c95ac2f177e2fb13ccc5950805bfa83_JaffaCakes118
Size

60KB
MD5

0c95ac2f177e2fb13ccc5950805bfa83
SHA1

1aa4c6e1a89ae66cf397357f7bd9d5026b117f0b
SHA256

68725c04fc51b9562d477fb411e554476a10e61c09e8c04c42bb46d713cbfd2b
SHA512

1144e729064ef1cbbdc5d65f5df5c034af66fac872486ec6890bfe80c00d9e9fb4cd0e716c63a46c873bf6c9bcf363ec5c6fa68f4e9de1429d8b3272f7791d39
SSDEEP

768:uSSpetc3tfqszcCHcRs8kzpE3TkSt9aodcPumSoQRw47A7/wfZ+/VwPDpfEaOkPD:uH3tfq4c9srWt9aK6uDnRJlB+N4Y0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c95ac2f177e2fb13ccc5950805bfa83_JaffaCakes118

Files

0c95ac2f177e2fb13ccc5950805bfa83_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ