847afcc371c9e4f937584ccffc77c098_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

847afcc371c9e4f937584ccffc77c098_JaffaCakes118
Size

188KB
MD5

847afcc371c9e4f937584ccffc77c098
SHA1

5aa50a09e7471c85365f3acf8ccf16c1efd69789
SHA256

459434cfa530493907816eb72b40bc4fe413e46cf5aa71f94ff3659a59a433fc
SHA512

f88e838993c9ce731602c6d105b21faff897915b9358b786cf2636737f06d503de49833b668f2f08350a57b872be7a5010fab1b9dd00c22467b5fdcc0e33102c
SSDEEP

1536:A3pAOSTWLQFWDd8CCmziQRlK7a+hdI5TDonSCZ/gSnLPlxObiw+YmCaGM8yB9hkI:UptSR4dKmzxI7a+hdKDMSpOwiYaWw78W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
847afcc371c9e4f937584ccffc77c098_JaffaCakes118

Files

847afcc371c9e4f937584ccffc77c098_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ