5b29413a44e669ea65a3c1e2d1ae1ca8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b29413a44e669ea65a3c1e2d1ae1ca8_JaffaCakes118
Size

102KB
MD5

5b29413a44e669ea65a3c1e2d1ae1ca8
SHA1

8b448843bdf6ae167132daf34d80b38d87d68ce0
SHA256

b0f510f05d5db63f5d66e38455c4a2f5666955e2b8a7056d4a6dc202c8abcc01
SHA512

1d5c6bc82cd71143e9b8d79eda0addb1fd98659647862da447c8818ad3cc97899b76085092c7267a5676414d3a6854268df2182b215ef4276854a099a5116c87
SSDEEP

1536:aKHI/PVZge3FZDqZFFeQjC09mUmFdlCHGrBK+Gr4wdAfMVZeEP6Okt:aII/XB3FZ+/BeRNdNydJyjt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b29413a44e669ea65a3c1e2d1ae1ca8_JaffaCakes118

Files

5b29413a44e669ea65a3c1e2d1ae1ca8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ