21f6a3c70a5bca881d9668c14235f9f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f6a3c70a5bca881d9668c14235f9f1_JaffaCakes118
Size

617KB
MD5

21f6a3c70a5bca881d9668c14235f9f1
SHA1

15a718631cf1b52f8351162f8fe5375a48e5e788
SHA256

1f206d85f668877579b971103bfcde2f1ee88e69fc3d43249a8c357da5ec3d9e
SHA512

979415784f86e162656afa3911314a5957a481d41fb93ec0875d51b3e2de953743d92e2d3b3143c098d9dbb0b954dd0e930de4f547622fb01e9954ff0f72f56e
SSDEEP

12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHMbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHLU+CSfasO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f6a3c70a5bca881d9668c14235f9f1_JaffaCakes118

Files

21f6a3c70a5bca881d9668c14235f9f1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ