790706bda74882cb773d5257a01337f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

790706bda74882cb773d5257a01337f6_JaffaCakes118
Size

139KB
MD5

790706bda74882cb773d5257a01337f6
SHA1

59ef5b62d638f0b017acd1c92f3412084021bbaa
SHA256

49af9b2644505e564fec32ad20872b739ffa7865bae996dfb432b1fc8995d1db
SHA512

c2538da63ac848c484de13f2a5f671dc5c3207df689b67114e774cd83d08c59f9fbf686201bd94ea6735d7390c4d45bf451e59ef3a4d809c9e8effaf0d70e158
SSDEEP

3072:LKFS9y4+kbGrHOT0eB13G1jhSzKdgvPVKyj+IdvFq/QtmHUZmR:h95LbGruoS3G1H2nVKJIVFWQtmHUZmR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
790706bda74882cb773d5257a01337f6_JaffaCakes118

Files

790706bda74882cb773d5257a01337f6_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ