475e034a4f138cb653487f8075f33756_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

475e034a4f138cb653487f8075f33756_JaffaCakes118
Size

110KB
MD5

475e034a4f138cb653487f8075f33756
SHA1

14f897c719dc644837fd0d6bc25d356b290a51ae
SHA256

ab7fb18cef46a6039145b63201095e50eaad03e33ebc919bfba629786e8bb3e1
SHA512

36abca35929f1d4476a069c73a041b9305d5c922c670cbbe7dd63afcfbe5965baab7d8767d0e6f9ecef083588fc13c219fd1c650f84472252510ff583cbf5124
SSDEEP

3072:SvAkt4qXriH4tzc9OlU25eGa9JsTBfI8Ox:XktXChMva9WTBw8Ox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
475e034a4f138cb653487f8075f33756_JaffaCakes118

Files

475e034a4f138cb653487f8075f33756_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 38B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ