85230cc5d4cddfa68403e78a9a8f66d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85230cc5d4cddfa68403e78a9a8f66d8_JaffaCakes118
Size

1.9MB
MD5

85230cc5d4cddfa68403e78a9a8f66d8
SHA1

4fe95edce41354c2dd87bd5214fa62cf045bcdef
SHA256

013d2065329bed8b16e1f92d547e182c839c87c5a81f55d053d3a94f61bf2942
SHA512

6ed49b2274efb518ce2edf39bc05004d0a1b27b56201cff66d61f11ee297811eb659099947a848e2032bc0b730fdbed03fca9201e437255b75c50a148b546cac
SSDEEP

49152:7dgSXV/cben111Cbeym76wklBLJmn/2x:7dyVw7RklBtmn/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85230cc5d4cddfa68403e78a9a8f66d8_JaffaCakes118

Files

85230cc5d4cddfa68403e78a9a8f66d8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ