71a3405a29c7bccd98285a54938f9517_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71a3405a29c7bccd98285a54938f9517_JaffaCakes118
Size

77KB
MD5

71a3405a29c7bccd98285a54938f9517
SHA1

5780a447429b4153831aedbcbd4a256a401d6e2e
SHA256

49d1cf0f85bda40d5e52c5cbf05200a60b882ba7a71659810c8b6eda4605df43
SHA512

98391f790765f41923324039c9e7732864aabbdfd8359ee2eaa5578350fcd72ffa97714d2786b27ac12094c32aca4f18bd3b77c021ae80840327d87665576feb
SSDEEP

1536:47tCr4fRbd/yAJK1L8GoiqeBCJ4jPERbSQZgCIFm8ymG:4ZO4Rd/yv8GoZegvVSbymG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a3405a29c7bccd98285a54938f9517_JaffaCakes118

Files

71a3405a29c7bccd98285a54938f9517_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE