68e732c6051ee141f1b51f362cf11626_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68e732c6051ee141f1b51f362cf11626_JaffaCakes118
Size

238KB
MD5

68e732c6051ee141f1b51f362cf11626
SHA1

83311c7f917084e578f7077d6d4b187265497c5a
SHA256

267b2daf84a5fac97d3c2e55e956cd6448b1f3f38e76a09e460fdcbeb1636a7f
SHA512

c6d18fa874fa9c3ee6e271d2bc83203f0745e5ae56d290348f63187535ad398d506391bf27ef27f212c5608fab45e7baa6f7bd728496fe06e8b0b2af7f3df55a
SSDEEP

3072:jZnnjRRiCG17H67ycsT2jc2ruq27ZnCJqSvg/IHTbTJjszpgwvd3xS8pQsPPMA1c:9nzu17a7fs/zkJVHy1HdlXXg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68e732c6051ee141f1b51f362cf11626_JaffaCakes118

Files

68e732c6051ee141f1b51f362cf11626_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ