38dd5cd60dbe9ae027267ee8a0070bc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dd5cd60dbe9ae027267ee8a0070bc5_JaffaCakes118
Size

765KB
MD5

38dd5cd60dbe9ae027267ee8a0070bc5
SHA1

dc9fa385e8a041afe068ffffda219fb8f22cb4a2
SHA256

a6f3341b3b47a28e234d0920038997a067577ef8ec4e4131c53f31b9dcf4bba2
SHA512

57e101224e2735ef83f53ae2be3ce489ccd298491fcca7bba98a2045b1b7b432f4339761654f28e4fb7e1cd496de85d0e9451fd3dfa572903dc4799846120080
SSDEEP

12288:7vyKABB/Lr2Uf8q0umNXGL6SCd3Q8mjWih+2zt4xEe0jLryMl9D:76KWtHvDnLuAyih+Qt4slZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dd5cd60dbe9ae027267ee8a0070bc5_JaffaCakes118

Files

38dd5cd60dbe9ae027267ee8a0070bc5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 494KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ