212a01e391c97947651460279901ce0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

212a01e391c97947651460279901ce0a_JaffaCakes118
Size

682KB
MD5

212a01e391c97947651460279901ce0a
SHA1

aee279c0db67351843d9e83f7c9ded7209e803e7
SHA256

5a795d89bfcc064e14713b66a862f408794a86b57c2d928c0ea6a880205a7bdc
SHA512

7441b89957307623502bd0b8db9af45bef5512362ae599fc473596bf1be7bb57effcddcfbf9d547481e770501732991f9355f240315bb8a0023bb83dceeca457
SSDEEP

12288:dr6Gc63cKHpFl8muuW5AJryauQSF+2YTCvKihz+d6j0CFFgbbs5LR8v1wEJIDdBJ:d2Gt3xFmzuW5Aoaul+2mZil26j0CFFgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
212a01e391c97947651460279901ce0a_JaffaCakes118

Files

212a01e391c97947651460279901ce0a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 90B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ