29f301510c982c0361b4d3318c5b3f16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f301510c982c0361b4d3318c5b3f16_JaffaCakes118
Size

101KB
MD5

29f301510c982c0361b4d3318c5b3f16
SHA1

d511f2820f5b2754c52eef1b74c7c0a53c481201
SHA256

26731d79c97ee34fb8db77e121448098e5bd41ed11de827a9497bdae94c34216
SHA512

937a56c5301169632a1f679e713450675beb36aa5d0ef5563780727df2de8ac09fba25945391e6b8711ad898fe0e776f07cf6eec7a1a3d503c9b023e3acd990c
SSDEEP

1536:mYIp3+3UR6+u7kPXLaoPjQl7nvlId8AtxdiDAZlMYQrJ:c3xA95nczz8DkQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f301510c982c0361b4d3318c5b3f16_JaffaCakes118

Files

29f301510c982c0361b4d3318c5b3f16_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ