42f990ea2f9d89aa096d3c607f936840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f990ea2f9d89aa096d3c607f936840_JaffaCakes118
Size

381KB
MD5

42f990ea2f9d89aa096d3c607f936840
SHA1

5428c027a95f952416380c922a4db279c3409198
SHA256

d4fe15c3d1aaabc55679477f8ec3d5de7a56685309c2c008e7d133f0ee6352c9
SHA512

907047047194ae9b1815f64c3fa3600bdf4d9f3837e5ae16886ba5c6026ef776ceffa387195440a3608a5db1fea87154190714c68ed4f031dcb3a165825307db
SSDEEP

6144:W8+jWfuNvs3aoOYmnB2fQ21pjRfs67FaD4s/GPhdune1OBcxFizS1oD8m1ovQmBG:W8+jWfuN037OVB2ffRRfs6B+4cghdkyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f990ea2f9d89aa096d3c607f936840_JaffaCakes118

Files

42f990ea2f9d89aa096d3c607f936840_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ