37a3b4e0344c61589a3c52e2752d75e9_JaffaCakes118 | Triage

Sharing

General

Target

37a3b4e0344c61589a3c52e2752d75e9_JaffaCakes118
Size

84KB
MD5

37a3b4e0344c61589a3c52e2752d75e9
SHA1

44ac981518fdf0cb884a66a2f9a2d3b38e540d06
SHA256

9333395d47e112dfc51336c963c0f173ef16b95e37f40c463e6db0fc96a1bc20
SHA512

2cc729180f1d45f5fa8edf1fee982b83d607a775c285c5e0d1490885e31305056e5ab131035c48de951e2f2bed825d13849d0ae0406b02dd8c5910f7e873f7c8
SSDEEP

1536:cG6mTJtM17ILA4upx5g0NvbaabT2d2+F1rLEL9F5gQ5VkxMC2wOLN:cG6mTJdA4x0xtMzFpL8VWxN2dJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a3b4e0344c61589a3c52e2752d75e9_JaffaCakes118

Files

37a3b4e0344c61589a3c52e2752d75e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE