2101208dbc0d76f7fe2dc29373db09d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2101208dbc0d76f7fe2dc29373db09d0_JaffaCakes118
Size

51KB
MD5

2101208dbc0d76f7fe2dc29373db09d0
SHA1

01a1421f1a53be588927072c51e9fc58578c02db
SHA256

fbc2464718df63b4c13567b5e8f08ce51b6ef2ecc64f756700ebd715c07fd06e
SHA512

3f5917f0f9eed3dddb6702ced13b38d7a7d6f5569f68c6481af239d1ea559a72d46d7440373eef2988916967173d8ed87d73c177766bc8175250ec284cd6c028
SSDEEP

768:nWkjD0KZeDewxkUs1iXMGI1Uz7dvsTqx5+x3Xjw0q9mq6muYrad+KLJuOEVNn7xG:Wkf0jZxkPlGCk7xsC2wam2LLHcJ5i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2101208dbc0d76f7fe2dc29373db09d0_JaffaCakes118

Files

2101208dbc0d76f7fe2dc29373db09d0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

IDATA
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 10KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ