1b08e269813c07605664c7c938f14e69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b08e269813c07605664c7c938f14e69_JaffaCakes118
Size

1.8MB
MD5

1b08e269813c07605664c7c938f14e69
SHA1

049339de3ed7dbf9cea127f57c764e8aa12d3ba3
SHA256

908300c6b53173ffde8e9d0f3fd966bbdb061370c02f3b8d3c53cc88a56b5411
SHA512

b88eef725ef51179fd15b9ba8ca23eced602ec6ff1bfa0ca2df14d9c52febc2799b9079ca04c6e379237a701529fe4811898a977f3ff0411e90da2a5391c5660
SSDEEP

24576:gK1RcJ6CVN+3nYKY2QBs207vldWohfoX53+nxo6BWmQuXSxzZzZ5s/HT4/xvmLXs:wgCVw3N4IBKzCz4/xvmxT2nf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b08e269813c07605664c7c938f14e69_JaffaCakes118

Files

1b08e269813c07605664c7c938f14e69_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ