39ac1d95793775350d6c3c4ed8f02c68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ac1d95793775350d6c3c4ed8f02c68_JaffaCakes118
Size

160KB
MD5

39ac1d95793775350d6c3c4ed8f02c68
SHA1

7d9c5d59a0432359ca3d6147b96bc1489a243936
SHA256

ea42c1beab4c3694738385fc7f9de9e0cb30801c58b17359761ffdc3f40c87eb
SHA512

811a2952e269fe80454acfb41635a740aedbb4bc9c5e384d652e85fb522b26a47fcb2a4eeb9f8a4bc97c3b0aa3e332a733f88702f24b5116bcaaeb3c98d3040c
SSDEEP

3072:Z4dRsGNjXRLFw1lILjEGr+5AV2f2ekQD:idRsej5LjEGAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ac1d95793775350d6c3c4ed8f02c68_JaffaCakes118

Files

39ac1d95793775350d6c3c4ed8f02c68_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ