62268b65143c9d1a9220c91e3ba6f17d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62268b65143c9d1a9220c91e3ba6f17d_JaffaCakes118
Size

77KB
MD5

62268b65143c9d1a9220c91e3ba6f17d
SHA1

0234cd71c5cdaf954c598930c8fc4cc1d69c69e1
SHA256

18ac8413409972c3cb0fd70e58e03fe1e096ab739079266c579809e4779598cb
SHA512

8d376bcd7d44c2fa78b9c2f7173a9551311be2e3804dbe59f22430a39e12df3a7f0ca5de5c523bf040409a8167e682652b985800c39fd5e95789d93ef0fe0e14
SSDEEP

1536:2W3mNzC439yIcvLyMZiIqTBjQVl650wrwn7PLKPnu:9CzCqSLaIqTVN6KwnHCnu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62268b65143c9d1a9220c91e3ba6f17d_JaffaCakes118

Files

62268b65143c9d1a9220c91e3ba6f17d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.code
Size: 1KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ggvdf
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ