2a235c24e4527eb9e7b50d1d97f7e98f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a235c24e4527eb9e7b50d1d97f7e98f_JaffaCakes118
Size

669KB
MD5

2a235c24e4527eb9e7b50d1d97f7e98f
SHA1

07d33b5c796a6360040fe747f729fd36821a577e
SHA256

cedbd8ccd7cd7b7ea59b80916404ce7461dca84c619e176b7ee7bb57a4f0f035
SHA512

5d1af293a892a804b9540e263d4105616ace38495d2504d35c95fbbf7db49b249f9ad67e1ed2bfdbe85d73e90e8b4fb725edee8c41d1b7da5bb024be2fc266d6
SSDEEP

12288:S9Q8Ng1N8CYyFbpPq9FJlD0Ok5O3x8mIGE+mlfm3xT:SK2Luk9FDUO3CGslwp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a235c24e4527eb9e7b50d1d97f7e98f_JaffaCakes118

Files

2a235c24e4527eb9e7b50d1d97f7e98f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ