3825e5bfc94ab52c1ba64a456058f713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3825e5bfc94ab52c1ba64a456058f713_JaffaCakes118
Size

104KB
MD5

3825e5bfc94ab52c1ba64a456058f713
SHA1

17e1cf934a96a8d4c0091267073bdaa9e0be3094
SHA256

b95db190ffc9267afda47fd2dfe3662c2cbaa50916ec8b13f85a36dad2a552df
SHA512

bebee29c0aaab90a975013a2bd5943b715637dd8ee27ff28d646be2fa89e56e5e86e96289fabd21a6e6ee5f6232ae631372d31e6776ecb16530076b327b1ba1f
SSDEEP

1536:Caqn7sDZNVc5JX9toppjvqDrvHxHExVJSEHZHK+7nToIfyzIO8ucIr:I7ECEXjCPNEvJDHZHPbTBf48ucIr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3825e5bfc94ab52c1ba64a456058f713_JaffaCakes118

Files

3825e5bfc94ab52c1ba64a456058f713_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ