5d01f8571c8e9bca81eb6cde3390ae24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d01f8571c8e9bca81eb6cde3390ae24_JaffaCakes118
Size

245KB
MD5

5d01f8571c8e9bca81eb6cde3390ae24
SHA1

d6771d33f6efc68c59f85d0e1c8776822eb56f79
SHA256

299e8ae61adb43931c8101296ee730f955adcd5f7e559ce4c92abb86cc509e26
SHA512

be31fe42a2fc12a08f2f3b5366d37f1726028b44e4159f01e58384106e15c2f0bd10ad05a6a4fe8eccb439433d6c24275ab4d3261489ffed990a9ad92c40cd51
SSDEEP

3072:xQTy7eQGV6WfUlOnSjcR5jAGpcuArNoJl++rKTkrKkCcgkrvD9z09XULqJVJ1:6TI1GbpM5NoDcArTeMvBzykOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d01f8571c8e9bca81eb6cde3390ae24_JaffaCakes118

Files

5d01f8571c8e9bca81eb6cde3390ae24_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ