397186d944b0c8f0ec1363d0cf971530_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

397186d944b0c8f0ec1363d0cf971530_JaffaCakes118
Size

11KB
MD5

397186d944b0c8f0ec1363d0cf971530
SHA1

164f24000c56fdb703b88c7cbeabb27ca13e8a71
SHA256

7f5476c3b9689240c4ad906f1bd2289c3e0660f5296b44eb5da9b1d7db456bcf
SHA512

96134c23f336c3b834528ffab1d06154f45c3f10d13b709b9f03665ec1d0d737f3652fdd61dfaa895f455f8b579d618357be18d3ae813dbb23308106a623b7e6
SSDEEP

192:wlgIjAhMaHKzXThBoPdyzzZ7A5fdjzvMSQfzXXXMMHS:w02dbTcHrwXMYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397186d944b0c8f0ec1363d0cf971530_JaffaCakes118

Files

397186d944b0c8f0ec1363d0cf971530_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ