18785ce2f366a426e8548e5d66aa11d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18785ce2f366a426e8548e5d66aa11d6_JaffaCakes118
Size

69KB
MD5

18785ce2f366a426e8548e5d66aa11d6
SHA1

d70ea25bc149004b36550f8a246832f13927c388
SHA256

5ec5ebd7f78bb33fde096ce77fcafa00e588cf080c2f1804c26d8d5836ca2972
SHA512

51231e088f3b88ed2d4b3b4f58eb831d1d3fbe9c605d0f1a34fbaea0e38da6f04816eed2597f67efb805c455e4bf9632c9e23082780b12a0a4ec863e0ad140e3
SSDEEP

1536:22aqGQbP7n49/UVGqZiLx9WrBm/smpWxofvYvXazI4Rwq8Fxn:2J4Pc9/UVGqZiLx9Wr0sYWxgvY/a7RwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18785ce2f366a426e8548e5d66aa11d6_JaffaCakes118

Files

18785ce2f366a426e8548e5d66aa11d6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 716KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ