104cff3ab09636f0e80d0850ae52d506_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104cff3ab09636f0e80d0850ae52d506_JaffaCakes118
Size

10KB
MD5

104cff3ab09636f0e80d0850ae52d506
SHA1

7bf9b06fdd9dde4bf335800e0981ddf3569876b4
SHA256

2d258bee940e63b02bdb8b81045602da325832fbea5ba3e8df901ee6acc0ff22
SHA512

8e9588bd5a4084177a193aa715869b6977e96c11166cb150d0c0e22701c7512cdd275039b2b753cf3e8300bb93d71df8b6917b4b6accc1323cca332dcc69ace9
SSDEEP

24:e31GSQN31T62jXlvFgzW4JUXd3qxG1tIfWaS:CG15WzPJUXBqxiqfWaS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104cff3ab09636f0e80d0850ae52d506_JaffaCakes118

Files

104cff3ab09636f0e80d0850ae52d506_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ