32593683015230f664e7d0dc4467baf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32593683015230f664e7d0dc4467baf4_JaffaCakes118
Size

168KB
MD5

32593683015230f664e7d0dc4467baf4
SHA1

f5e5325e75d772319c73b2f0914df62a4b3da28c
SHA256

3cf35df69f74bde369c05274c8ca5465543901b8f21ef1f3c99de96e353556d3
SHA512

998ec63395c068db2d54f092ee2aaea18da5128efd6fcd737e3e6413bf9fb1ef4ed6c71fcde84fab8fc981b352859e5dee3d7583d5b7e2b4659cbaba56cf6899
SSDEEP

3072:oLS68IufEyFxx34kobIpwewTbNcAjGp3K:oWHF3xldokA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32593683015230f664e7d0dc4467baf4_JaffaCakes118

Files

32593683015230f664e7d0dc4467baf4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ