1b177f28cde3e0f82a649938fcf606ad_JaffaCakes118 | Triage

Sharing

General

Target

1b177f28cde3e0f82a649938fcf606ad_JaffaCakes118
Size

89KB
MD5

1b177f28cde3e0f82a649938fcf606ad
SHA1

bdc51cc75bc011e800a8700cb45632f5ecb63778
SHA256

f5a892bb979bda7e5599baa8a2c7368301f6bd50def40e832f2d78c3e8a19c7f
SHA512

f53a7ab40a9c212e858ddd6907e73a3f3553d96eb83c25522e8285fe60d65fe383e8a8a8a7fa324bcace3ebf5e136b266aa78117b216463ec0780517e6c7da34
SSDEEP

192:wQUhCC2IfcXIg/KL4T6tvChIwlAXJRGiorv0QWcKx+8YXF+v7jBhZY63uwci1Ov:/PCPf0/sdV2Whorv0QWd08YViB3L1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b177f28cde3e0f82a649938fcf606ad_JaffaCakes118

Files

1b177f28cde3e0f82a649938fcf606ad_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YCIShare
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ