609fe53b31d7b79a6eda9b7f05618ebe_JaffaCakes118 | Triage

Sharing

General

Target

609fe53b31d7b79a6eda9b7f05618ebe_JaffaCakes118
Size

48KB
MD5

609fe53b31d7b79a6eda9b7f05618ebe
SHA1

3b27315ccd2b1206e809ee3829a0bc9c939719ff
SHA256

ceba7ec6b7d41d8e561cbe62c95ca40b9568df888cacb79df3ebb0a1e988c8fb
SHA512

0f3bae3f27665037afa691298c6068f63f86302884ce9f8591d365ca023996693319f4a4d087a1b7dac2a64659f689a5ee60621e9930d1ecc3975268922fd555
SSDEEP

768:7YjHIT7Y5qcoHWp+ngXAdiB9xnJDnXFnXqZ:yIT7yoEoo5Xq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
609fe53b31d7b79a6eda9b7f05618ebe_JaffaCakes118

Files

609fe53b31d7b79a6eda9b7f05618ebe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

455a3620eb6781ae53fe8b9001893a65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ord525
ord476
ord419
ord397
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord395
ord304
ord305
ord811
ord362
ord364
ord365
ord477
ord512
ord511
ord795
ord513
ord822
ord329
ord528
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord553
ord594
ord444
ord447
ord550
ord551
ord657

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ