44e882da3c28a3609cc86219072ca4d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44e882da3c28a3609cc86219072ca4d5_JaffaCakes118
Size

63KB
MD5

44e882da3c28a3609cc86219072ca4d5
SHA1

bda7e3e375f7faa8633142ec559aebb4a5a87d93
SHA256

4390207601ca7f31a31a79359ae55ef1d70dc4c401e4f720cd99ba7f66e6d23a
SHA512

5e103a64cf74816357def7ffee3e07df0c5e82890add76b56c684ab86b59624b0478380550f537cf29b3389918120c5ffd5579b308ca825438c3d79102adc940
SSDEEP

768:5Ud/wED99BQRAq12NwDCSZeD3JJA3gdRIGlWPNqFClupUj5kk43H:Kd/JB2Aq12iDCSZedJA38rWPNqBH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e882da3c28a3609cc86219072ca4d5_JaffaCakes118

Files

44e882da3c28a3609cc86219072ca4d5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MSSMIXER
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ