460754259cd0a9747afb192a9d77ed64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460754259cd0a9747afb192a9d77ed64_JaffaCakes118
Size

236KB
MD5

460754259cd0a9747afb192a9d77ed64
SHA1

aaee178820920041f6b3cfc997a87ff5a430f6eb
SHA256

e417fa6f84f16dc847cdc6f75d425cd3e58fbb5d396a96831d90b42f3e9168c7
SHA512

3394a6e61f5804d17409fd644e6f57881538761fb4d8d8ee4f77497fa09135170c59e35ae0b4af5a9bbbcf9dec46562c084e9a20a9fa5dbfd599dca7220d8488
SSDEEP

3072:XtnXBanM1NFNFWdeV9bNjct2OK3pgoiyPc14WGNbNd1APt8LyYA1P5Bx/4MDT4xo:dnxsIN5WoVpq7RyPe4/b1YWYDiL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460754259cd0a9747afb192a9d77ed64_JaffaCakes118

Files

460754259cd0a9747afb192a9d77ed64_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ