736fe42ca9c2825ea0d560afdb076709_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

736fe42ca9c2825ea0d560afdb076709_JaffaCakes118
Size

24KB
MD5

736fe42ca9c2825ea0d560afdb076709
SHA1

8a5ef240f7e8a6e692c51e49b446423c7c00e8b9
SHA256

2be43111d33e105c3d3ac0ca0439bb83893497fa9cf5e212db79791a62d568e3
SHA512

0b0242f472506afeb418b45c30ff56dc15f827d05e9b283d7c7ef17d9efe7fd940b0e846895d40da6a08552a0b6296f3022c0b47e809ef72a4dc4d75fd13de77
SSDEEP

384:ORCJ8mkOMEPbqqCs3+EzgFOy0s/XLwVetPF0aK7uiHEypKuP4kvd5X0AzF7xYJl8:vJ5zdDxF3L0Om/XkDaK7uiHEmKYnLzFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736fe42ca9c2825ea0d560afdb076709_JaffaCakes118

Files

736fe42ca9c2825ea0d560afdb076709_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ