3658b7241005f4bd2e5b4affd312e665_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3658b7241005f4bd2e5b4affd312e665_JaffaCakes118
Size

104KB
MD5

3658b7241005f4bd2e5b4affd312e665
SHA1

02b5b6895f1a05f5f20f4104d2869ea7c219db2b
SHA256

bc13a1d2d03b6d130b2663942cb82fb7783dcb9670340192740e3c6d789e9c82
SHA512

a9257bb936ad0cd01e703f292e13e8eebb8f974ccc48c93089d9bdc9ed3a35b143d56dda3f699cb6811bf7388d417c4ca9bcad871c792340a466c55e54423b3c
SSDEEP

1536:cWkq4QOA20AxhnXO8xVmgfmngsrnu1Y5MKSkzsSOgTy810dDg7X/ux:WT8AvlxVbfmngsru1Y17RWbdDg7X/ux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3658b7241005f4bd2e5b4affd312e665_JaffaCakes118

Files

3658b7241005f4bd2e5b4affd312e665_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ