8557b4e1d504c7d4a7938d8344697872_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8557b4e1d504c7d4a7938d8344697872_JaffaCakes118
Size

217KB
MD5

8557b4e1d504c7d4a7938d8344697872
SHA1

66d5f2c5a1f290562d06b4ead0468174587fd092
SHA256

8ef05e7b18c19e1d308fda4ec2c45bdee4096543058af2188c0339291849cf61
SHA512

c5e2bb655211d8d3b5289bcc3d774dc7a53d9603ebfdfb62e4a1902d62eb67e84cce519651af7cf54d065ecf7825478d44252ff480f5f7cf4a45ab5c91ccd1e8
SSDEEP

3072:N3/E6JZizZYMafNVWBLFMNfcM+5B5RydEkvwcuF17atrU4Jr8F+rFEHGwA1Rj83k:N3/iexlYBLvb5gdzuutUmwA1in

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8557b4e1d504c7d4a7938d8344697872_JaffaCakes118

Files

8557b4e1d504c7d4a7938d8344697872_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ