1a1c1e95797f102af8f307dbbca3760b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a1c1e95797f102af8f307dbbca3760b_JaffaCakes118
Size

159KB
MD5

1a1c1e95797f102af8f307dbbca3760b
SHA1

d6cb84a417cf525f4f634dde17b6ac8c53b2212a
SHA256

45c0ed358f8ff52ac875a2ea6f0a98880ce3e9a11d82f3a8364b0bfc94a44ec9
SHA512

48932b4fcb3a299b25eb07f56015076e00a968d0bf3183fcf99bdc77efa11fd5cf6af7e7f97398213d5409f9aa328f5e7ec884cf0fc34c493c27dfce94fe967d
SSDEEP

3072:LqoOQQjZ/WM09hlR9Ck1JjYRHXzBOT3rKTBC9zq9JcnKntmBxhK2:LqfQQjZ/WMG7JjIBOrKlWzqUhBrd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1c1e95797f102af8f307dbbca3760b_JaffaCakes118

Files

1a1c1e95797f102af8f307dbbca3760b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE