169cd68a77526f4ce241d010311277d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

169cd68a77526f4ce241d010311277d2_JaffaCakes118
Size

97KB
MD5

169cd68a77526f4ce241d010311277d2
SHA1

7abf72eb2340a1c45c1faa0f766126ca01774853
SHA256

b57b18212a8abb62ed88b383a9adb62da6c210d9663235f151d684838a98a265
SHA512

0804022161439abe61eda81b226d0ce60ddea9800dde0ca5b77cf7e76e1e4896cdf400ed975dfd4fcd4e2fc9b6a77ece6e9232feb6235168e80f4ad57e3f5c74
SSDEEP

1536:gwiQnaw21d7LzLe0MggdUNTCUl//RBh4jVTWyk1T0m6QVot2poaFbXNeHR:gw9i1AFUR/RUjVTW/0upoaF0R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169cd68a77526f4ce241d010311277d2_JaffaCakes118

Files

169cd68a77526f4ce241d010311277d2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.strc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ