482a0dbe1aaecf97e3c1c799ada73843_JaffaCakes118 | Triage

Sharing

General

Target

482a0dbe1aaecf97e3c1c799ada73843_JaffaCakes118
Size

28KB
MD5

482a0dbe1aaecf97e3c1c799ada73843
SHA1

3aa2679803a3d5d17bd1a214afc8e7c61ca30365
SHA256

7e79b560347a1b0ea36c9d182d0931472d5f18cd700baa0f7e30f6b59f4e48e1
SHA512

f0092811900c6087052cfa2fd8a628136844ee3edb5d3e7fb03b6f72d780b1698d819c762a4db66cb67e7fedd56d6274eb331a58d04a06eb1cb8fbbc10b48fc2
SSDEEP

768:pljP4cuMnN+oaGtnx4lA+Jz3inKnNzsn6S2PWJ:pljP4cEoau4PNinKnlsf2uJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
482a0dbe1aaecf97e3c1c799ada73843_JaffaCakes118

Files

482a0dbe1aaecf97e3c1c799ada73843_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ