193816ff741546728d2020cae19b6f1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

193816ff741546728d2020cae19b6f1f_JaffaCakes118
Size

38KB
MD5

193816ff741546728d2020cae19b6f1f
SHA1

a56aad005e0c873e93dca17d5d7fa307ef48e9fb
SHA256

1c613e849659feebdd3217ee4d740b4d37eb195066615668aa720db155b58ac9
SHA512

875a2c6e2383136ec1ce1353e074e5218800ffec2ed6ce2a1288eecfc1a1961579385e43b59affeafd7aa4c2b739191282d57ca8e78a0aae96f8dd2956a1c95e
SSDEEP

768:T5PV3DbccvrqK6z85at1jQUDwV/Jp5AGSHljGRlQWfKwVHL9qYmiKp:1V3DblrqK6z6at1jzDaJpelRGRlmAHsD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
193816ff741546728d2020cae19b6f1f_JaffaCakes118

Files

193816ff741546728d2020cae19b6f1f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sl@k0
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sl@k1
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sl@k2
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ