81c08306baaad495cb1b73380bbaa4f7_JaffaCakes118 | Triage

Sharing

General

Target

81c08306baaad495cb1b73380bbaa4f7_JaffaCakes118
Size

15KB
MD5

81c08306baaad495cb1b73380bbaa4f7
SHA1

6aed65093a145103d5f65ac0188aa2e360197e05
SHA256

a145e1bb9e9e396c3b4d519e30cc08ca8fb191e0d1552d1591728e16b6755d2d
SHA512

cecead92dc8f2946fc177ae13105bb1d10ff6824302caa41ac8fcfb5799778c62d84a189ed3d66d487dda43a64861423d7bb84510e9dd95e00b86d10a5997427
SSDEEP

192:QApuPMI+b5HOdui9S6uv3a8ZUC/PWbdVfNjCGWGXjKluY9ZhIx/HkEGBJpH8Gfhc:/ubd5xuf1UoW51QlGYT8Gfa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c08306baaad495cb1b73380bbaa4f7_JaffaCakes118

Files

81c08306baaad495cb1b73380bbaa4f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 832B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ