326df169295564e29104cbca937aff7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326df169295564e29104cbca937aff7a_JaffaCakes118
Size

534KB
MD5

326df169295564e29104cbca937aff7a
SHA1

cd442d74cdfcbe479ece3a0a7028e7d4a86babe8
SHA256

f0aefed5a0dc3b6b7f16fe2140dece1f7f939089a03f5cee4a8a0232bba839f8
SHA512

0ce5ac0259b7af320d86388ac1130db1b63fbadaf6aacdc7919f6c3d4957a06e0853f916c8702df63e9f4ac96dd8f7d05fbd84329d99b74be04d0ccf84c120e3
SSDEEP

12288:g4Kur4byH/TW+XocM3Xc/8I5N/YiKdZL45:gngfTVy3M8Ibvy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326df169295564e29104cbca937aff7a_JaffaCakes118

Files

326df169295564e29104cbca937aff7a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

init
main

Sections

CODE
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ