861e8f3679c0650f83a5e9d9e48ba592_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

861e8f3679c0650f83a5e9d9e48ba592_JaffaCakes118
Size

128KB
MD5

861e8f3679c0650f83a5e9d9e48ba592
SHA1

bcbefaf31eb7948c88bffb1597962e43a82edc8a
SHA256

27c32ff4ee11d0b077721f0d6f88cd19da716135ad14f6d70240d30a20c29ecf
SHA512

9630f7dc76dca841c5b3c553b5250b004fe6a7be76468f1495651bb3d33b797d8ca87ab8f91a8bab3b575ab1f416668d29ceac7dc2916eaf20647dacedea9333
SSDEEP

1536:kesF8Fg072D7jnm41WxDnNGG4CknY3NbSZiGyxqeYrCdRL33xp+zAvZp71CPPNzO:kes+1siF4G4bnqbSZo4OLp+zwL76Jmx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861e8f3679c0650f83a5e9d9e48ba592_JaffaCakes118

Files

861e8f3679c0650f83a5e9d9e48ba592_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ