726d6b3817929e96833811e4ae817e0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

726d6b3817929e96833811e4ae817e0b_JaffaCakes118
Size

118KB
MD5

726d6b3817929e96833811e4ae817e0b
SHA1

8e276106e65adf810292921e5368638740b15500
SHA256

107b91bc6e73d3677e2468a515748dafdfe262a6fb4f257a465eb2d18916016c
SHA512

5c844f6e4ef5301ab43669cc2f3fedf2dd80849d597f92a18656bf6a314c25906473b5d93d71b56d67d9a16f16d035b36f10124fc54bef24f8be87b556282559
SSDEEP

3072:Xer8NZgBpmECxd02wiKoEqYk/xOd/LQA:Or8NZgBpm1PCk5Od8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
726d6b3817929e96833811e4ae817e0b_JaffaCakes118

Files

726d6b3817929e96833811e4ae817e0b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ