855656ca4805ed5cf943362dd5a470da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

855656ca4805ed5cf943362dd5a470da_JaffaCakes118
Size

54KB
MD5

855656ca4805ed5cf943362dd5a470da
SHA1

02d78ceaa7db423f73495f828ed9431e4d1daf90
SHA256

cd7e406e0d11a9327add7402ae3d4094f6b06f24ae2d71d2163dfa0fdad122f2
SHA512

fcd262f2b6ef51554c8017ae2d6dd14af405739f9f293e849a000519847431d6c2e406b9d0303e4a9034b48ae533e73194d920d5bf1447a37ed5a34b6f3fb2f8
SSDEEP

768:RSZqeQjwH0jj4JZZ9UMuKvXXGEc+USso1ymc+ulxPeQk4ept4Ox8Zc3wSxBl8:oZqeQpEzQw8FSso1yb+KPipT8WgSxz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
855656ca4805ed5cf943362dd5a470da_JaffaCakes118

Files

855656ca4805ed5cf943362dd5a470da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

i
s

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ