2a6d6439bcf64aaaf0d9adfb22ce21ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a6d6439bcf64aaaf0d9adfb22ce21ef_JaffaCakes118
Size

212KB
MD5

2a6d6439bcf64aaaf0d9adfb22ce21ef
SHA1

16dc30d497a8f40929874c63f95ba3bb284d6afa
SHA256

cf5602a80c95f79aafa804cbd78d70cf1c3190b7d0e9c4efce2b7f1c5e0a7d5b
SHA512

0b30837f2ad6eebd7fbc1eca196d97aad31ff4ccf60af4dbcb7cfaead030eec80d572a4754998acdededbd818e06170454b2d7bd5e444a46731c30d77b39eea5
SSDEEP

3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVtWZdncjlqDDHgXJYVXK:F4r/iEIznun5gsdW7NVtWDcqkYVXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6d6439bcf64aaaf0d9adfb22ce21ef_JaffaCakes118

Files

2a6d6439bcf64aaaf0d9adfb22ce21ef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE