1864d38754457a90f506473343286a07_JaffaCakes118 | Triage

Sharing

General

Target

1864d38754457a90f506473343286a07_JaffaCakes118
Size

238KB
MD5

1864d38754457a90f506473343286a07
SHA1

ab5ad15e0b5d1a7b88dadba53796e9f288c9ae98
SHA256

1aed6e52133d4d1ad6203876d4e2fbb4cc6d42e6e1bca018c179f45b678e77af
SHA512

2a9cb5a6e72c241a3775b13acb07c6f05a87ed1707b287b3e2490a5e343ba5236186bd646ec3a00e922e743e6d8a703205593ee63ce3d893a3957d5dbf83f90c
SSDEEP

3072:vZnnjRRiCG17H67ycsT2jc2ruqxJSLtyYfsI36CmCnkvMDAb+Yz6jDYIvr5r3xSh:Bnzu17a7fs/mJNYfsxbACz6jBr5ro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1864d38754457a90f506473343286a07_JaffaCakes118

Files

1864d38754457a90f506473343286a07_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ