6fd4ba7ee01711201c91c09d3ae7a0e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fd4ba7ee01711201c91c09d3ae7a0e2_JaffaCakes118
Size

37KB
MD5

6fd4ba7ee01711201c91c09d3ae7a0e2
SHA1

b992d3c34fa7d0cb737b9b67c4e4d283453c7444
SHA256

58882a5c28c066d64b7c33090b76f68b025be8232577fb8980e7fa2aaa948f76
SHA512

3557e4217231bb2e75b4490f03358ee2234eb6dfc4ce9948e63e7a4d7036e68970bb4427d1b95e5a50de3125ad436eb3c07cde0208ec2d8e1bf57e78f3862a42
SSDEEP

768:7kgPnf9g/F5XJbeVHFUUXNw2vff0YYo0rE:L9gFeVHeUXGaffY/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fd4ba7ee01711201c91c09d3ae7a0e2_JaffaCakes118

Files

6fd4ba7ee01711201c91c09d3ae7a0e2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE