717fddf3158a751e1f1c6110f4810b41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

717fddf3158a751e1f1c6110f4810b41_JaffaCakes118
Size

100KB
MD5

717fddf3158a751e1f1c6110f4810b41
SHA1

9953a77d5c5bb3256beed9225aeab8d191831eef
SHA256

e53d15e490f6df524abb0004155e29a8b8da3c2794cecaee7586c84f23b484ad
SHA512

2e1af691e97c41aef153c035d0f3511a0307e2d30d7bee1230c2f410ead09f7eba727ad6e29ccc3190c3c42b1bde750c9354826213e7f03f70a3186d9ca9748e
SSDEEP

1536:6BrPqz2747sE8nlUxJfvSGAMxSgo8bJgDbf1f6eejLNbk5tqWI3y8xMd95VoxL:6BD47NFPfK6xjcJf6eiGq33S0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
717fddf3158a751e1f1c6110f4810b41_JaffaCakes118

Files

717fddf3158a751e1f1c6110f4810b41_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ