6397694ec5fc7fb3f69900f4078237f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6397694ec5fc7fb3f69900f4078237f2_JaffaCakes118
Size

117KB
MD5

6397694ec5fc7fb3f69900f4078237f2
SHA1

b5a53c82f2079a589fe8d2ded7ae4978255bb4da
SHA256

4ba95e12cd69037784ad94706249db3d6b12546de464753063600a3f3bf113a0
SHA512

219f76d905c5d2da6c4c2217c3c9de41f1275dcdf672d2e0d26b1dd622cddd2505497acb79aef044e71cfd2207c5ada34ede08817cf814507a7cf11a2de28723
SSDEEP

3072:Ya5/z729WYiFTuUe/9njsvcc2b3SXCRCAPBzJLTY:35/z72WFTfe/lsvcc2TCA9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6397694ec5fc7fb3f69900f4078237f2_JaffaCakes118

Files

6397694ec5fc7fb3f69900f4078237f2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 106KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE