879eb62eecd0f8f9bca72150b7ce6ad9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879eb62eecd0f8f9bca72150b7ce6ad9_JaffaCakes118
Size

232KB
MD5

879eb62eecd0f8f9bca72150b7ce6ad9
SHA1

0887d574661f2c3dc6d34735704b3cd6e987e7fa
SHA256

9698e7813d79f6a0c90318c07163d444147f5137a6030c372c8b5aacb3c82c1d
SHA512

62e9347aa569e656426bf4c17584aa238ca27eb33f29069f1bf56aa42e0d27a8d35d601d7486eb846b9d48f65889930bfb96333031e9f491f9c0c94e543dc45f
SSDEEP

3072:iefHmbC7CGoohdkosC//83zMHubRV5JBMbicZg7/DGdhoSBvA6:iUHGCmGoJC//83zMHuxcZg7/yTooA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879eb62eecd0f8f9bca72150b7ce6ad9_JaffaCakes118

Files

879eb62eecd0f8f9bca72150b7ce6ad9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcp90.i386.pdb

Sections

.text
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ