3b6e0212f59356edb2950aece74f7692_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6e0212f59356edb2950aece74f7692_JaffaCakes118
Size

79KB
MD5

3b6e0212f59356edb2950aece74f7692
SHA1

cbca6a0d08e1601803a8157b71a1861d0a8e2eaf
SHA256

95791f82e7d3aa563e5d065cf9a62ed718ee8cd45f23a21ee5d558aa5a95e395
SHA512

b8805e5a12553d014fb531e7c69dc652abb4a17bac33bd39b6517282bea62ed710d2f619eff53c7e6680fa03455b89d08c23253b1fb203236dc835e7196010bb
SSDEEP

1536:lNqVe0dfQBL9sjZrSdKWMkpY+lvBhBvRugZ8JCr1JN5YRjhniGtM:LqoOQQjZ/WM09hlR9Ck1JjYRHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6e0212f59356edb2950aece74f7692_JaffaCakes118

Files

3b6e0212f59356edb2950aece74f7692_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE