491a160569f603c61bbc565580e09675_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

491a160569f603c61bbc565580e09675_JaffaCakes118
Size

112KB
MD5

491a160569f603c61bbc565580e09675
SHA1

a4ac717138afdc32eee1ec9c4afcf72208daaa6e
SHA256

d59d4cf07ef346cd5c4a6d303ada20bbb0c56b3aa40a6e1254f1df9a99f0919e
SHA512

973bc02918edde2241cb92e763d16d0e0456252c7c2aeee7e7e62f71610602b5747f2c09e92560f044f04e809d2bfc294e0e388a2c733827b6324f44a4f59447
SSDEEP

1536:i9CQmFXSPYACppLGgLjUOextvHwAUis/yR:i0htdwPh1hs/yR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
491a160569f603c61bbc565580e09675_JaffaCakes118

Files

491a160569f603c61bbc565580e09675_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ