599e6fb53bdc27920011b35f93c420b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

599e6fb53bdc27920011b35f93c420b7_JaffaCakes118
Size

244KB
MD5

599e6fb53bdc27920011b35f93c420b7
SHA1

cf6ecb57e0869c9ec8829acb91007e6c0caf6cc9
SHA256

8ae345f7ec96d113fdd1455924d591c1b106faf215ab28f9f633ab61fe3a4c09
SHA512

847ba7d5633e46e0baa5f5a685a2ab1f1758d51f21f4860a1866da073a52eb431c917006b3e4f3c995c3cd9e9d35dc3536f921b9d7aed04c92e2976da8ecf71b
SSDEEP

6144:d81XjPuziUT3AArCwpP2AME4nDWgRAkP16GQn8xID0DMFjLXXqg:IrunT3AAmOP2zR3P16GLxe0DY6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599e6fb53bdc27920011b35f93c420b7_JaffaCakes118

Files

599e6fb53bdc27920011b35f93c420b7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 226KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 196B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ