60117b704f8bb965cddfd1280f7004aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60117b704f8bb965cddfd1280f7004aa_JaffaCakes118
Size

1.5MB
MD5

60117b704f8bb965cddfd1280f7004aa
SHA1

d69700fccafc95b0a3f07d55c15e74b8380c62c6
SHA256

1702a2fa06d06a505ac21ecb7cabf519fee5edbf66846f3e7f59a0b60cd8a084
SHA512

7c5a381a34da24782fd94589b163e4fdd667a5fedeb8a36e50122561595d42ac6e942ced9a28158bbcece863f7ed50da5d16a30b37c9c895c5cb72ab02a3a27d
SSDEEP

24576:WNj1HPlk6SfP129ai15EN2M5Agm+KwQmmnYot6+zqjoORM+:W/EeWzmamnYe6Wqj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60117b704f8bb965cddfd1280f7004aa_JaffaCakes118

Files

60117b704f8bb965cddfd1280f7004aa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ