386cc12a4b17eeee58b84c49c220b975_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

386cc12a4b17eeee58b84c49c220b975_JaffaCakes118
Size

68KB
MD5

386cc12a4b17eeee58b84c49c220b975
SHA1

f1931b325c332c4085ab2790e73aa3c8862d51c3
SHA256

88dd2dfa6d55f91e684e3e5c3ab762a2c05895061812374a83bc95a9573c2e66
SHA512

32c4a4efceea19eb0a0d10989133c6fb5187b7951b975b6df2ab7e10c446eadc1ebc23dda932242686407949284f06c36f44b287779526c72bac57a253a8e2ba
SSDEEP

1536:ejAyOYuFiH4928FgvaLaEW8MYe5H5Y0Z:eFOJFIrCeHT5Z/Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386cc12a4b17eeee58b84c49c220b975_JaffaCakes118

Files

386cc12a4b17eeee58b84c49c220b975_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ