864237cbe13fe73f6b5d65b8b223d094_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

864237cbe13fe73f6b5d65b8b223d094_JaffaCakes118
Size

45KB
MD5

864237cbe13fe73f6b5d65b8b223d094
SHA1

c3071a90f5ae5ebe3520cf0f6999f69e5c9e47b1
SHA256

0f8dd5265fef515e4965d78c7ee8795be0f940be97fef15e8039e0b89bf59c49
SHA512

a0e0ed01050b1bdc7f349a3a0e39c602326ecd5c0857065fe60fd435af60470bc2a406d3318d29fcfb58b9ca329e5c0a21c78c2947efa539e300907d7f3164f0
SSDEEP

768:WSnMqulszKi4X7Q/UT6pV6SJ7yvl0mNm3mAaEmVGW4ZEMjAyTA1Ly:hnMquls2iCTK3JW96aZ73Ly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
864237cbe13fe73f6b5d65b8b223d094_JaffaCakes118

Files

864237cbe13fe73f6b5d65b8b223d094_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ