48eb097ade80e3859fb57a48649cfa67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48eb097ade80e3859fb57a48649cfa67_JaffaCakes118
Size

97KB
MD5

48eb097ade80e3859fb57a48649cfa67
SHA1

052b40b639cccff4ba8aa9bd1a37f6378a9b8a07
SHA256

ce46c5e50e5b5c2711efd72330a90e6bf7199c40533dc3cfbeca87212d18825b
SHA512

915762ab654928044524a182e91d9fa36db339f68815d514a2a44942c30c4bc66c213450c68f1f3d4956a26d95c5a766d6278e06d9e9d5ee2649d1e46bcb64ad
SSDEEP

3072:j/7VgjxXN6wucxVjY/zQiHoonqn7V2ZA3hZ:j7w9/wvJZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48eb097ade80e3859fb57a48649cfa67_JaffaCakes118

Files

48eb097ade80e3859fb57a48649cfa67_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ