296386e19443818d3d1bcc4ab78b9262_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296386e19443818d3d1bcc4ab78b9262_JaffaCakes118
Size

214KB
MD5

296386e19443818d3d1bcc4ab78b9262
SHA1

3610d194813a0998cddc16c877666a0eda95613a
SHA256

94694f10206ea29832a92d6f8a5f65af134a43909f96094b8aa3d4228064eed8
SHA512

b40ef1ca41b710c5ec35b0e74bed18746355eb4f45bfa62d633be2304b3c17a747a53ab3f2eeb6dd3d10deaa0acd969acaeccd84d1f7bb6cb01ce556441d29f7
SSDEEP

3072:E3/cgxqEgZXwQ2B/KqKfcveZ7x7W2N3YcpcICu86oP9gK+rWDiKB1RzI9q1:E3hxseLlKlRx7W2NYu3oP9MrP61s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296386e19443818d3d1bcc4ab78b9262_JaffaCakes118

Files

296386e19443818d3d1bcc4ab78b9262_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ