195d78ece6f16b667e6a5ba17340e0c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

195d78ece6f16b667e6a5ba17340e0c2_JaffaCakes118
Size

50KB
MD5

195d78ece6f16b667e6a5ba17340e0c2
SHA1

9f23801e182f47abe6a543b435f511f65dfdd017
SHA256

54bcdc23bc82e33f4c36f14303e19ba6e372839b6dee05c859a273918cf51deb
SHA512

8315200f6fabeae772456babc52f99c160d557b8c28f76330b6ce79a39065010398a46928f951156e070e5673041d66ca25c90d4f1cb90b710bf217af5c1af3b
SSDEEP

768:TLNFWg888gQIi5eoPcBwGwMdjaT9WGCR9dXFocKaDxO+2Evk8U16rwJTFKEDzA7Z:x8g8mBwRT6XVFop2OEh26rwVLyP+UPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
195d78ece6f16b667e6a5ba17340e0c2_JaffaCakes118

Files

195d78ece6f16b667e6a5ba17340e0c2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

EDATA
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 10KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ