5a8fd1c737d2c13ec72f9b6754e888c9_JaffaCakes118 | Triage

Sharing

General

Target

5a8fd1c737d2c13ec72f9b6754e888c9_JaffaCakes118
Size

40KB
MD5

5a8fd1c737d2c13ec72f9b6754e888c9
SHA1

481df0d3aaafef9ee49133b24dd2cb6d29734e1f
SHA256

c41e2b90a4399ba3acc080209773efa22f75c3b81349d1c8dbdc1d7442efc829
SHA512

8057e6be6af279a63c6605853526497d1cf6fd50a807cfc142a3f20792adf9d64725dff47868d4631f73cb43b8203f06129c87078656feb66b659278148891c6
SSDEEP

768:Q35yKut93kAQX3TECskY5tAVlWGIfdxBcUL5Xn26Vs7zgD8FvxTFq:Q3IKzXzJskY5tFG+x0NIDQxM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8fd1c737d2c13ec72f9b6754e888c9_JaffaCakes118

Files

5a8fd1c737d2c13ec72f9b6754e888c9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ