3bf0b28b596f26ddfa5e37aca7b63a16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf0b28b596f26ddfa5e37aca7b63a16_JaffaCakes118
Size

80KB
MD5

3bf0b28b596f26ddfa5e37aca7b63a16
SHA1

74f6bf3b40c1ec0d044a3be50ad3996552fb03e1
SHA256

11a6e0d82fb92fca72275054a3778062ccbb6af2fd7222b26f36db2ea4eaf11b
SHA512

28007b7625e3478b072bed58a454ff3990d9737a07c6097b5fa9ab2f06e7e383ade121f268d2bfa0c02d7e290ab8c3944927db148416209c299c3c93753304e1
SSDEEP

768:GzWSo+K1iABzv/shto0cXUIurDBvrCFs0Q6olFIuS1fYT9I9DVfiQoP:GzPo+DUzXktDp/Bvrks0QzFppIBVqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf0b28b596f26ddfa5e37aca7b63a16_JaffaCakes118

Files

3bf0b28b596f26ddfa5e37aca7b63a16_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE