2d69c80894588ad9f48f498370faadf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d69c80894588ad9f48f498370faadf9_JaffaCakes118
Size

33KB
MD5

2d69c80894588ad9f48f498370faadf9
SHA1

647670c2e0d3a770482cd8af3d988246d8f54d2e
SHA256

7c986394e04663efb1ea7084437a6c080d66b7587b21fecab064e9d9a71872eb
SHA512

788b0dafc7befc0b3d4c41903728adc6730f91a316765991a35b49c0164a918cd6fbb7b3cbe5b6f65b57fcd10f46968ae6221ef49dcc6f968a7098087f78104c
SSDEEP

768:rwsU8iDR2lleK79M0HxeiC+kP5mDSr5kRMULXC:rLUelHyhVx5m48LXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d69c80894588ad9f48f498370faadf9_JaffaCakes118

Files

2d69c80894588ad9f48f498370faadf9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ