863816d27845b76d3654d71f095c5ec1_JaffaCakes118 | Triage

Sharing

General

Target

863816d27845b76d3654d71f095c5ec1_JaffaCakes118
Size

60KB
MD5

863816d27845b76d3654d71f095c5ec1
SHA1

86fe8570191061811dc4006e858fc0a614b56a4a
SHA256

c85acc4b3f8b82b9afd21c6f26e600a54fadc7a6d603fd0023de9ded0a9aba14
SHA512

93000b52f510d9ebc175bab53d6f533bf9760a1cfa82480bfab7bda5c362d58ddd1af1a497a4023817fc75b4c7b1ac2290b09602384ae27c071df4b028c8ec9e
SSDEEP

1536:YMOkhCj/WWA23zzRqA89cTii5dP0rIW83t:LZjiB/Prr3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
863816d27845b76d3654d71f095c5ec1_JaffaCakes118

Files

863816d27845b76d3654d71f095c5ec1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ