3c791393b1d8d0a277b7504e6befdf7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c791393b1d8d0a277b7504e6befdf7c_JaffaCakes118
Size

295KB
MD5

3c791393b1d8d0a277b7504e6befdf7c
SHA1

df425813e3035f053043bd289d45e76a69f79568
SHA256

acd375733cc13f988bdcc9557b95c518f623b7c92aa13b509bc9423d61d6b68e
SHA512

54cf945c5fe35f49829c588bd48490b670280625012f4fe9d80bd8c5261c6054d424e5c329a214539cd9561daeeacab709752b8aac39e4573ff08efc85f94b69
SSDEEP

6144:Oc5BANQfmv8f37ZQX3DXjSXFGMOLpI76q7Yj7ph4vzLsX:fAyu8fVc3P2GMOLyEj7gvzLsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c791393b1d8d0a277b7504e6befdf7c_JaffaCakes118

Files

3c791393b1d8d0a277b7504e6befdf7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 282KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE