2d1f8662d1eed59a3fe5f8ca45961569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d1f8662d1eed59a3fe5f8ca45961569_JaffaCakes118
Size

18KB
MD5

2d1f8662d1eed59a3fe5f8ca45961569
SHA1

fdc3a67ed18d7f7647e7a528c3a0a03a1257a5b1
SHA256

3215a97ed92e84b5d86211154cff3d93cb879bab898159873620a455c1a150bc
SHA512

c6656c9563f5036bb9dc3c5d61b8489913c9388bb45c63fc1e58cf478a84149e4e5e4c8e15346b0093a0b1c4af45dbea5cfce8649d16832d752fbd8efec51d53
SSDEEP

384:u+RdCyiYMqlWjDmQq8uNOdA4JUw2xbNzAzdeTHY:uSCycqlUDmQYF4J+pN8d0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d1f8662d1eed59a3fe5f8ca45961569_JaffaCakes118

Files

2d1f8662d1eed59a3fe5f8ca45961569_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ