3c639589ba49960c90004061a38897cf_JaffaCakes118 | Triage

Sharing

General

Target

3c639589ba49960c90004061a38897cf_JaffaCakes118
Size

74KB
MD5

3c639589ba49960c90004061a38897cf
SHA1

5e858819135497c44a3b6e3ea635d7e6822ad5d9
SHA256

24d0e898f70f1e98dc07077533553121136c52787eab8909c73cb2c6b8728730
SHA512

a91653d5a535f7c468cf0f8d5ea747bf5c96e16464c62e9fd735902e68c431769cdcbe2ab7c64522a521591e3bac4873c3a2776044672370c5a55135686802da
SSDEEP

1536:1KGq1QIs0P3ZVvXwBQwMPdfc7nToIflUQd7K:IPs0P7z/P9cbTBflUM7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c639589ba49960c90004061a38897cf_JaffaCakes118

Files

3c639589ba49960c90004061a38897cf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ