61802ebe872c0a14354499e2b057cbb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61802ebe872c0a14354499e2b057cbb3_JaffaCakes118
Size

17KB
MD5

61802ebe872c0a14354499e2b057cbb3
SHA1

2cad21a09ed31adf03e54f919893685de6214d47
SHA256

010cb73f151e944b9c70dd6ef61d7fcbe972ca8cb4abc44cffb0f6c030c6fa01
SHA512

d5475caf97920722047321a7506fdc943ccc80668e4197c88c020e231af83fdeb492b11525991ebbcc78f07d138129b1e9f7e46823c078891e4498e376ecb0fa
SSDEEP

384:C8x6yRFh+11rtmTPtr9lOFYp9oyNxObB1EH+69JuiU/bpL4Kf:C8xFR7+Z4tr9MKp9oyNSB12jK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61802ebe872c0a14354499e2b057cbb3_JaffaCakes118

Files

61802ebe872c0a14354499e2b057cbb3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ