0e643208a4ab975446a56181fec10b84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e643208a4ab975446a56181fec10b84_JaffaCakes118
Size

385KB
MD5

0e643208a4ab975446a56181fec10b84
SHA1

95ee52e8148aaa12db28fa2b43749ddd8fa6b470
SHA256

1bfccac9b2ea207c80294f3877ff0cd76ab886409861db5f05e1912255aa121a
SHA512

b0b8dbd91779d0b3614ad7ffb75fbc5f57e15fc38e298472b9cb0af274cd6b5618bc5d74e661f845cba241b076fcb5d326dd065528f3b68b8035bb78370699d8
SSDEEP

6144:JdinQXOSh/69x1GaOJwGuA56911TyXjwJCqKimCHQSwUuNyKeNl9FKD/q:JwbShCxI/23o6D1TyXzqErkRl9F0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e643208a4ab975446a56181fec10b84_JaffaCakes118

Files

0e643208a4ab975446a56181fec10b84_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 36KB - Virtual size: 9.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 344KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE