3c21fe06001329ea0817fcd13d0dae1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c21fe06001329ea0817fcd13d0dae1a_JaffaCakes118
Size

320KB
MD5

3c21fe06001329ea0817fcd13d0dae1a
SHA1

29921e2292067f4df30e633e291109d1d933d5f3
SHA256

96856c4d7de0e4bd05b1d0e6c365265658567e831c49a20881856f651fa8720f
SHA512

9d61a091a8eed0d7ddeba4c1cbbc536d86e3fa45794e8ed33d4014f9e72eefa4617b1cccb70a3e80c6fc710e134e36a8a1d29dc9b9d4d6c6f395b292a98ecb36
SSDEEP

1536:NqRoZys7if833rWdEFdJ1tYNsP+v3xAYkPYsetgINNJlzB9jUfoerpH1:moZy/EFdJ1X+5CPYbPNLBs11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c21fe06001329ea0817fcd13d0dae1a_JaffaCakes118

Files

3c21fe06001329ea0817fcd13d0dae1a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ