469a943d58d5ba13888ec72682316bfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

469a943d58d5ba13888ec72682316bfb_JaffaCakes118
Size

28KB
MD5

469a943d58d5ba13888ec72682316bfb
SHA1

f943f695835b3d84dce4e7fe3321c2a5387e7663
SHA256

4e8c78f8b3d814792d46f12f2c68227478481050cf3fe4230974f8ab7960902f
SHA512

8528324e9e54ae2b7e60e368e7dc061693175a02561cfaa9df3f12fef5c137ab86386238133b5c923ffff56a5ff11fb2c2b1471674f254d338e14aeeee1628d5
SSDEEP

384:l2MzJS+toBXqDIyDjbBtC08B+iSiiIgBIT6R5g4BArjCwJ:lNzEANIEjbBts+iYBSY5g4BQFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
469a943d58d5ba13888ec72682316bfb_JaffaCakes118

Files

469a943d58d5ba13888ec72682316bfb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ