4912f878a0ea5f7a9ae3ba59a2a10127_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4912f878a0ea5f7a9ae3ba59a2a10127_JaffaCakes118
Size

33KB
MD5

4912f878a0ea5f7a9ae3ba59a2a10127
SHA1

e39939c1d14442a59592fbbdb09234bc39b6ddb5
SHA256

be0ba4201a53eec91c56087d02d5c2026b446521ec8045a7b5345abe805b6b30
SHA512

cef9f87ad15c589ba39694275398d54b7d5fc37e70ad91ea7731da2e30ad0c92acdaf5dd5647cadd37d43b2ffbfc8d0e8eb9be1cff79abb9cc67bec50a3b08d6
SSDEEP

768:tnKLIZqk58ex2koAUoySoyLBNQTNdOPJ+EGZ7rSjuT16:Akqk5R2pho7Y8YhWjuTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4912f878a0ea5f7a9ae3ba59a2a10127_JaffaCakes118

Files

4912f878a0ea5f7a9ae3ba59a2a10127_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE