627f28c5002635980b288e4eaac47bd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627f28c5002635980b288e4eaac47bd6_JaffaCakes118
Size

105KB
MD5

627f28c5002635980b288e4eaac47bd6
SHA1

4f3ffc6dd76c09988ff9579ee98f5ff5e5521c72
SHA256

6fad89af2d9b6ef693a9ca4d073c386281f64bf85044e2a0504f7074b45fd8a6
SHA512

eee3feaefdc0b288becfce2e2fff734c204d4bde963fb5733fbb23af1cd65f6e43bc55b493320e5b53b6f142d829b5a143f2e7645b339b1e1bee4a70bb4da4c2
SSDEEP

1536:QvsOqRm2JQRz7PY0KAvJcdYdJEJGH2PXn2yxtS1QQ9kzU0wUsEt6DEzP9ifmyLqx:QmJYVviduH2PXn2yxtS1Oj9TzP9aGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627f28c5002635980b288e4eaac47bd6_JaffaCakes118

Files

627f28c5002635980b288e4eaac47bd6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 258B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ