3e068cf79289d7957846646958e9ae65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e068cf79289d7957846646958e9ae65_JaffaCakes118
Size

308KB
MD5

3e068cf79289d7957846646958e9ae65
SHA1

74a6cca65317171b91d7cef91623628fc45dab01
SHA256

5ca3cad8d06088b93e3a6fc158fb27c55e717939b518b6535af269a072fb9a5b
SHA512

5ec288af1759abae3b7845853f9329d0c929a5cf2e1c9728628fb3bb3de69c8cf63ae968209411bf381f52dfdd69bcd4fc9f4e1e012618e090aaa5b861eb6204
SSDEEP

6144:y2Sqdm9AtDSMaBde+Tlsu/TjZvywF6hYRPqG3TBUklkxQw8rxwSiBeI:yAhBSMaBdhTbT1pF6WNDyxQw8lcJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e068cf79289d7957846646958e9ae65_JaffaCakes118

Files

3e068cf79289d7957846646958e9ae65_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 295KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE