4715b62fd59c0f51cf4f7ea3489df845_JaffaCakes118 | Triage

Sharing

General

Target

4715b62fd59c0f51cf4f7ea3489df845_JaffaCakes118
Size

199KB
MD5

4715b62fd59c0f51cf4f7ea3489df845
SHA1

fe4b716a86ad4084e33bcf83a78b0e34e64c6483
SHA256

cd77f99595bed69935b608cb621f8f330631d8a368a0f2e46bbf79e4d260781e
SHA512

3e84f7ada41e08fdeb7e48ab8eba0410b0182c5db00308f010e3222e99646f967a8e7c5dc62729c997da7fa92e55c85d2d52b5c07202a3597149a1222320a925
SSDEEP

3072:sRwAhlHgHI1KLs5BOdFNlcYgrEM4lqH3qKDYhQocJb+DUQW9ryFVSo1:sRao1KLGBigww6uYNc9O9cmFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4715b62fd59c0f51cf4f7ea3489df845_JaffaCakes118

Files

4715b62fd59c0f51cf4f7ea3489df845_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ