498dfec53196a2fc15dd8deb5fadc986_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

498dfec53196a2fc15dd8deb5fadc986_JaffaCakes118
Size

295KB
MD5

498dfec53196a2fc15dd8deb5fadc986
SHA1

7e318832a35cd62cd2827fceb88d8df45d92bb1d
SHA256

b00c4d6e32b34e98837a7790fe705c5f84e76b361a49082fcbb678f358fb67c2
SHA512

bf51f8a9874dbc1e7e3360c61da5aa03312725fc3ddc96cf0e02a74f3ca8b2a38e0f04889be8bf10e05e6c531c47c70e2cf3c0ad32c704aebaba1010a5426cfc
SSDEEP

6144:c0X5K7oTonWEzJf7aPwTqoSc6Z5VddTlqdfwRM3gpXVaipqoxs:cw5qnxdjKKqrc6vVddTaiM3gKipq+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
498dfec53196a2fc15dd8deb5fadc986_JaffaCakes118

Files

498dfec53196a2fc15dd8deb5fadc986_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 282KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE