30af9f060a89a13c8d0641e06346ccfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30af9f060a89a13c8d0641e06346ccfb_JaffaCakes118
Size

67KB
MD5

30af9f060a89a13c8d0641e06346ccfb
SHA1

29cb52740d15b5b681c09cd2893d85d1ebaeddf3
SHA256

c4b0718021c6c84ce8a677e1fbb4b1ae643bf978ad2648e6b548814a2eedfbef
SHA512

bd58033303dd9027312ebf5faafcc6ac7d19c3c8d564551700f8e702ec2314faf9809c8a0a620e6035c524963bf03cc568cccbd1cbe9b927199d4f8776ffa0f4
SSDEEP

384:H/AUvIzWrPcwyeEdU2UQ0hUNTkYSbZoti6rBYEAzfIniX:Hy+ZyeEdU2UnKu7bZoE2K5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30af9f060a89a13c8d0641e06346ccfb_JaffaCakes118

Files

30af9f060a89a13c8d0641e06346ccfb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ