87ab86345f826605fecbffef23af6058_JaffaCakes118 | Triage

Sharing

General

Target

87ab86345f826605fecbffef23af6058_JaffaCakes118
Size

680KB
MD5

87ab86345f826605fecbffef23af6058
SHA1

8031a4335d0310b136b31ab8dd6827371a62f2d7
SHA256

7a5fbcd7305a50556f307901afbf6ecc017ce70b4f031a2c7475dc0cc465a323
SHA512

bb4f511a57fd08f2c8e85b24ebaa921bc43829ded682eddc2e6f2ab75b5d0a97fd10cc3d3ddf811f28c24d4277279bee3eeecd1d58998ec8a48dcddb33e45d41
SSDEEP

12288:PgvG/eHsRYhShq0GW5ALcf/7bBJxfzvmKOrwJzpE6xDt5MJ5RFvBf0QahtaxPI4d:PCceC3h1GW5AIf/RJJyKhpE6y5PvZ0/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ab86345f826605fecbffef23af6058_JaffaCakes118

Files

87ab86345f826605fecbffef23af6058_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.MaskPE
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ