17a2b5116b87c12e28baebecc60f7304_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a2b5116b87c12e28baebecc60f7304_JaffaCakes118
Size

61KB
MD5

17a2b5116b87c12e28baebecc60f7304
SHA1

bf8a4034925e4767093fa10ba5afa6174a77aa0c
SHA256

17a97d7c513b09079555e93f170f7238b522f4926707804c3e6a2e3fedf80965
SHA512

df9992c9403e3d8fa9cdc8fceaa2dd0aa51914a309257ef946aaaf10841014f266917bb5e139e7361b340af0ae3bbdcb416e9a56c516f59a6a755533646b5dfe
SSDEEP

1536:QUcuLY9y9LUXFDxDV6VioOkBTwtuD95zY1DztJJ9e7:lbL6ykDDV+inx29BY1P19e7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a2b5116b87c12e28baebecc60f7304_JaffaCakes118

Files

17a2b5116b87c12e28baebecc60f7304_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.data
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ