2496a8b1ba240fd7e52638172df1f47f_JaffaCakes118 | Triage

Sharing

General

Target

2496a8b1ba240fd7e52638172df1f47f_JaffaCakes118
Size

102KB
MD5

2496a8b1ba240fd7e52638172df1f47f
SHA1

1305f2fe3c8ec0b3db428b7b851530607ac34774
SHA256

befe40324354dab46b4020337d663eec8351716083fcd5afadff63b92d1089c3
SHA512

441bc4c37872bf6287d726c29c441401c3e0d8d495f4af7f970b995340cd69d629d8e4b824338e7ba6ada651094c0d319f2590a855df805646e44790c2f67451
SSDEEP

3072:YP+SbFNHCl/OBsB5mq7a0AVZttATGxiE9Y:YPrFNHs/OqYqvlTGxiES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2496a8b1ba240fd7e52638172df1f47f_JaffaCakes118

Files

2496a8b1ba240fd7e52638172df1f47f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ