3dc75bc9ba57c18bf88663963bbb50c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc75bc9ba57c18bf88663963bbb50c7_JaffaCakes118
Size

609KB
MD5

3dc75bc9ba57c18bf88663963bbb50c7
SHA1

e2cc25dd118d3aef3ff2ec1970ea39e2bd88b85f
SHA256

65f14ae4b0e869f72896fc712347ddc8fe9466c2f1109924c0db5e1bbe66ca36
SHA512

5c12cdf68a220286d55a1e74adb76e61fac620813e9d64def72ea50f0a7fda307312ce6c771a8a6e0a6fdff60f8fe38bbeecf94c1599e9f46430e9184c537972
SSDEEP

12288:4YzchQVZnkmt/70MWugxPJZFpf0c1pHRbdJxUR9rNXZL4:L4KV5Hpt8bZHLHnM919

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc75bc9ba57c18bf88663963bbb50c7_JaffaCakes118

Files

3dc75bc9ba57c18bf88663963bbb50c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ