5cf1f5a3e6cef869df7cdc3eac0dfbf5_JaffaCakes118 | Triage

Sharing

General

Target

5cf1f5a3e6cef869df7cdc3eac0dfbf5_JaffaCakes118
Size

121KB
MD5

5cf1f5a3e6cef869df7cdc3eac0dfbf5
SHA1

cc84b9fee8462d1ec234b80fc67a8d6849d160bb
SHA256

425b909921521951f9c42968b99fcc20bff37c9ce00b57d92ed326529334e94b
SHA512

787832e1307251716f1c5feb48853e0d88c436ec232cb7512ef06de6f29f6ee6de2c2780886d281c229511b109140c39135b34af09a85b1c1bc8af6dedf589b7
SSDEEP

1536:pPiJZGkBL0R+9uHi0pzh5F//Dsbl4pKv/hFzxwJ3j9R7dsxmlSF+k8QwexyVTz0b:cnXBQMcNd5fpFj9RSJg7exkTIYwaDzU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf1f5a3e6cef869df7cdc3eac0dfbf5_JaffaCakes118

Files

5cf1f5a3e6cef869df7cdc3eac0dfbf5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE