0cd7d220f05ef93a3ed7267c06f795a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd7d220f05ef93a3ed7267c06f795a2_JaffaCakes118
Size

68KB
MD5

0cd7d220f05ef93a3ed7267c06f795a2
SHA1

7f85c0a6782f41b850100c43e2004aab46cf5ece
SHA256

2e573cfa9cc1cc05fa4753870bf1babf4ba6aabaa56d67bc6f69ae7e6c6238ab
SHA512

636db97105a6ca9a772884d777a6a4969456aad38ad154f408fd9f2ee3f87b5c228f08ba8a10ae050e6e7f67bfc3cffadf66758c06e2199ab0f7d683f80b51d0
SSDEEP

1536:JX/DhILGDhzVA84p3RyFhXMMAEPbpz/s5c84lOFeInd/uX77s:JX/VvZy8cwFhnAEzp/KFN/uXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd7d220f05ef93a3ed7267c06f795a2_JaffaCakes118

Files

0cd7d220f05ef93a3ed7267c06f795a2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 107KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 114KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 116KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE