347b6d540c7eff337b30871bb8ba6ede_JaffaCakes118 | Triage

Sharing

General

Target

347b6d540c7eff337b30871bb8ba6ede_JaffaCakes118
Size

197KB
MD5

347b6d540c7eff337b30871bb8ba6ede
SHA1

677345c7f54c5f70b78930eef8042c5691725194
SHA256

c256b34418bbff478505aa9d737156bdf573ad9d95c5897863c56cc7da054747
SHA512

744a6d7796460cd58c71d9a97a21aa3cff72d7d202f2e03452532d26c433f5446135d01f6a3212420473bdd20f1f8d268cbc4a48617bc0cfb03ed4fc6400f120
SSDEEP

6144:yHNf6qG4UgWh/j1SD1sZ9flBtfhNqbQMxCQpKIJv:ytfBUg0j15RNqTxpKIJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
347b6d540c7eff337b30871bb8ba6ede_JaffaCakes118

Files

347b6d540c7eff337b30871bb8ba6ede_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ