2ed612e7011964742577608a3440b5a2_JaffaCakes118 | Triage

Sharing

General

Target

2ed612e7011964742577608a3440b5a2_JaffaCakes118
Size

34KB
MD5

2ed612e7011964742577608a3440b5a2
SHA1

c470df584501aa0248a1d55f558b7ac7176a2ace
SHA256

93bf3858e309cfe9a270c68ca36135d4805248a0c8ed98f272b244755f793d39
SHA512

5d9c54c6b78511f87eda6885fd3b3ec94305f66dd952c25e133a51a58f2af7a999e08fb2d4b307db1a2fba2b7098a1acaf9e220b91c3a5bc96033205f2918ad8
SSDEEP

768:eUoi8qZOhQnwx3ABOoJF7XxrbxzYdhdLMZBZd5/Sdf:eUv8qZoQ4AXhNQdLMZB/odf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ed612e7011964742577608a3440b5a2_JaffaCakes118

Files

2ed612e7011964742577608a3440b5a2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ