5ba755fd8e54c1505f1134894ab1f379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ba755fd8e54c1505f1134894ab1f379_JaffaCakes118
Size

439KB
MD5

5ba755fd8e54c1505f1134894ab1f379
SHA1

78bac186d185ee303c0011ab4be9c3cf898086c6
SHA256

ca42d475e83ba922406c76259b425f909df4f1cd332675c034dbae2261406d9e
SHA512

75f22606c5e77776198cc33280cd2642f1cf7a2cf0e59f7bdfebce1ca5fdbdf24f418c844479c5e977133a37e6e3ead2684656e2e06490441433b422d0c5b046
SSDEEP

12288:TKx9nMst8PUbHeO2ovVbV/5beoY225bY:WzJ+8aO1vVBsrDbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ba755fd8e54c1505f1134894ab1f379_JaffaCakes118

Files

5ba755fd8e54c1505f1134894ab1f379_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 813KB - Virtual size: 813KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ