32f0d26e1d00c7c128c53a0883940549_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32f0d26e1d00c7c128c53a0883940549_JaffaCakes118
Size

89KB
MD5

32f0d26e1d00c7c128c53a0883940549
SHA1

157619e919e2a49fbe6cbc134aa4c938ca211dd2
SHA256

0e213a0e4f10a9ac3186d1c884b1f9fff6a7f05e7e0d4e092fe549119e453fd8
SHA512

126be84dcab428d8eb884b66892acd3f923997ec6e9d4d21fb6af4f35a4f7705d1ab748a5ccfd9e01619e7195db083a5e3b66aab926d2e33ff4180be0a7d9d1c
SSDEEP

1536:ujqjoQH8uxLxVGip+gQSzWvCtvgI59uvwTcic4zL0LWWSNBUJBoZhEx9:totq/ygQkWqtvgg9uvwTjc4zL0LWpNQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32f0d26e1d00c7c128c53a0883940549_JaffaCakes118

Files

32f0d26e1d00c7c128c53a0883940549_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ