5c74d2628dc38bf0dbbfbcbd85a910fe_JaffaCakes118 | Triage

Sharing

General

Target

5c74d2628dc38bf0dbbfbcbd85a910fe_JaffaCakes118
Size

109KB
MD5

5c74d2628dc38bf0dbbfbcbd85a910fe
SHA1

160d8001936c0e609a65cde766d8d1fc3ae587e9
SHA256

ac48eb57a4bd0ab280d6b5c8861fd598c3ebb6965f46c11fb5088add3a085dea
SHA512

43f595f3a84dac4f0e7643d82d28842f012cb92d9e2611d425736744458a6b2d48810f4dd34c02207a74e0758dca60105b54c47c4e977755e6a2f66a1253fa3c
SSDEEP

1536:WL/AicgTgIYKOocuI/zu1bDxme8g4uotPOhr/ntT+j7oYyaGf4Hfw:y/AS8jaqzu1bsRuoK+jNya1o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c74d2628dc38bf0dbbfbcbd85a910fe_JaffaCakes118

Files

5c74d2628dc38bf0dbbfbcbd85a910fe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

MHN
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

nero
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

mao
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hemo
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

heymo
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Nero
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE