1a0b069385350912365581118e100739_JaffaCakes118 | Triage

Sharing

General

Target

1a0b069385350912365581118e100739_JaffaCakes118
Size

81KB
MD5

1a0b069385350912365581118e100739
SHA1

04fc44fb195c43d358acc02932781515071c22c3
SHA256

d4faaa3d811d767b659e5b529c14dad74373bbeebfb8dfb81c560f89430fd8f3
SHA512

23d712cffd6488c3e0d3b4aecdd4fb5832b5cb5b1364af1cc73ac4f8c8b990d38a5d7fdd7302a4d8a5262a935ef52a8c8c30c59fc6401c479542e1df16f4121e
SSDEEP

1536:lNqVe0dfQBL9sjZrSdKWMkpY+lvBhBvRugZ8JCr1JN5YRjhniGtZzrLm:LqoOQQjZ/WM09hlR9Ck1JjYRHXzm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a0b069385350912365581118e100739_JaffaCakes118

Files

1a0b069385350912365581118e100739_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE