878bff0d6b588ab8ed07b680b6c819cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

878bff0d6b588ab8ed07b680b6c819cb_JaffaCakes118
Size

268KB
MD5

878bff0d6b588ab8ed07b680b6c819cb
SHA1

5f9720b2ed929bdf03dd5ae6b03c967b886330a0
SHA256

10928772881738a2ee4b353a39611403c1b75687b62765b2bdac5661c125b3fa
SHA512

bd8e4404d88dcf200b8c4d1586fa8747c1d492ec79ab0edde2713b75f9f95f6f5091217c071b144e70bac39fd640fa024f0b4f9395eb404164d73e43473415df
SSDEEP

3072:IIKniZRxmehUc3pMsTZsZK34s1+Rs+RViFtSB8iv7qPMbXVxczQ68QYMNzClDtXU:SniRMsR+mMP/0MbUzx8QFNmlDtLcZKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878bff0d6b588ab8ed07b680b6c819cb_JaffaCakes118

Files

878bff0d6b588ab8ed07b680b6c819cb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1017KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ