5ee82900466b65685437c2712b68ce92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ee82900466b65685437c2712b68ce92_JaffaCakes118
Size

388KB
MD5

5ee82900466b65685437c2712b68ce92
SHA1

d1fefcde51df8845cfb8650445f1b42691f78dfe
SHA256

6d53d0b5cd5d61bd30950e6f18882b0baf2e4ce397d374a236e0ff0d5e57a019
SHA512

837fc0f2281bf6af9eeb80acca760b862ca3a4ccaa3bfa5e0a282b67a46a08aa09d82abdcc0f3fd02865d21f8726457a3b658c6b088d3dc66580b3417f9548ee
SSDEEP

6144:zKBGNc4+AWSs9BnQ67Qur04vUMMLEC2irrbzf1G5j72OmOj:hcLBnQ67Qy04vUMMgHiDpG5jaLOj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ee82900466b65685437c2712b68ce92_JaffaCakes118

Files

5ee82900466b65685437c2712b68ce92_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ