15021119f2c137a64b3564cecccb60fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15021119f2c137a64b3564cecccb60fc_JaffaCakes118
Size

48KB
MD5

15021119f2c137a64b3564cecccb60fc
SHA1

6779b80e5226fc5f4504a2a635aff0f0f7f0e80a
SHA256

2ef19d6d7a50ece96fa0e741d6e2abb602028e89da57cda77e04d9ee23ae9239
SHA512

8bebc4fc9186231b05ef6235c2838c69431e76cfb82a43616f91fc44d7b5727ee8e0d5c95dc9619d4f5967f301a61258a72309e65e28d776b08b12f01a6fa698
SSDEEP

768:NJ5jJnJ/NUk1qFXrSpcLL0Rtt7nhzVEVPOuY4p3RykajyAHAKX4YE5MAJn:JX/DhILGDhzVA84p3RyFhXMMAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15021119f2c137a64b3564cecccb60fc_JaffaCakes118

Files

15021119f2c137a64b3564cecccb60fc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 107KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 114KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 116KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE