68c6f36350cf08700a481feef013c8c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68c6f36350cf08700a481feef013c8c3_JaffaCakes118
Size

177KB
MD5

68c6f36350cf08700a481feef013c8c3
SHA1

3aff607fcff3865b495c1d79f16c99c3399c61f4
SHA256

0e7b0bae026bd11e72a80bf19d06472035d44e1774e09b2a7d5f4815842c5208
SHA512

f9f5726493d540dca78b0d5ed6db863b847054a94abf1fd5763393d28af4044475f49761baaec7be2cbfac2ae6b5eb3a7013d55817bfd918fd34182f9f3b2654
SSDEEP

3072:6ITePGNMApUT7fS4NmSDQf3B/CAOAvcxP3wXPNToYm8IZ/6wIPPH5VFxZ2+1:6qePfN/0ongXFThuZ/6wIPPHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c6f36350cf08700a481feef013c8c3_JaffaCakes118

Files

68c6f36350cf08700a481feef013c8c3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ