64a2fe29bf32a860c44223dfa1edaddb_JaffaCakes118 | Triage

Sharing

General

Target

64a2fe29bf32a860c44223dfa1edaddb_JaffaCakes118
Size

614KB
MD5

64a2fe29bf32a860c44223dfa1edaddb
SHA1

9c538c0f850096a51188536b0aeed5c631a9e51d
SHA256

789bdfc6d798eaa6d25dd8dea59041ba81a6d13c442b0287d81d3a3b1138c505
SHA512

a40d40ed115dc0d3df9d32d4fe6dd974425d31d94c0c5b0733d1764e18266f24a88f817a6b20de89fa692e7196e2ef421ab2a78e4aa917edb76951d5b245e579
SSDEEP

12288:SYzchQVZnkmt/70MWugxPJZFpf0c1pH4bdJrs2xnd:d4KV5Hpt8bZHLwCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64a2fe29bf32a860c44223dfa1edaddb_JaffaCakes118

Files

64a2fe29bf32a860c44223dfa1edaddb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ