656b7c35556d09a055d4d5dc7da366de_JaffaCakes118 | Triage

Sharing

General

Target

656b7c35556d09a055d4d5dc7da366de_JaffaCakes118
Size

614KB
MD5

656b7c35556d09a055d4d5dc7da366de
SHA1

d96649ad95fdfb5c59dc0ca20f3b660b0ea6c757
SHA256

9731b6f4b6e2332cc9cdfd06589195b215e1b821ca7a784f9cdd686e066f045d
SHA512

4f574fd6097760378258f7c071ea338e58722d355b2960389e6feecf14ddba2c4b578f1ce150d61f091f70e9f05a5715c3d3cfc6e9492b129c86cd8e0b3a3310
SSDEEP

12288:SYzchQVZnkmt/70MWugxPJZFpf0c1pH7bdJrs2xnd:d4KV5Hpt8bZHLlCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656b7c35556d09a055d4d5dc7da366de_JaffaCakes118

Files

656b7c35556d09a055d4d5dc7da366de_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ