841102c75f18977429260c96b890f452_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

841102c75f18977429260c96b890f452_JaffaCakes118
Size

609KB
MD5

841102c75f18977429260c96b890f452
SHA1

5f49d187af80fab829108f5a77ddb8746a462cc6
SHA256

66161256fdec5ee7a6f6e7b715a9a154c923ab28a48b939b93fa602a4e571fff
SHA512

8358e5d74122d877b7eee26d32acc1775ea6a780cad3aec1c515ba769d5e2f8629c26baea64f3f5ca6770bd0104ce1a6eaec9d02e78ea626e142de55803731a1
SSDEEP

12288:4YzchQVZnkmt/70MWugxPJZFpf0c1pHdbdJxUR9rNXZL4:L4KV5Hpt8bZHLTnM919

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841102c75f18977429260c96b890f452_JaffaCakes118

Files

841102c75f18977429260c96b890f452_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ