1c1a879d5e3852e487ab66b10c072d77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c1a879d5e3852e487ab66b10c072d77_JaffaCakes118
Size

186KB
MD5

1c1a879d5e3852e487ab66b10c072d77
SHA1

6df7afd2e16f08a2c747fabb95bb339459197fc4
SHA256

d9fd2d5248edf187345f7905bcca6da60471400111eaf5e76a75e789430daa19
SHA512

eeb72a0fd3e5e0327ae48fbcb9804e7b570b61eb378e82705965e0280e7e483024ea4f86469bcd106e41cf9a157bb7b06b84651a37c0ff5a996e023551a83d24
SSDEEP

3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVtWZdncjj:F4r/iEIznun5gsdW7NVtWDcf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c1a879d5e3852e487ab66b10c072d77_JaffaCakes118

Files

1c1a879d5e3852e487ab66b10c072d77_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE