889177bf4237d72611f87ed06750125a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

889177bf4237d72611f87ed06750125a_JaffaCakes118
Size

395KB
MD5

889177bf4237d72611f87ed06750125a
SHA1

264ea0d9a12e4cd8031a705396104bc1d467c818
SHA256

cd69d40ac169c46eb31da60981b00b96a18433986a5d22d48bf026d0ebd53641
SHA512

0fe7533d1e978d945784a3be2b4f5fdd18fbb80246f8f1561f7605d1756eb53232754a9583a1e78d30f778e33885563a3f46b7e261920dbb306d91d711ff3956
SSDEEP

12288:3s7OBXH4CAK4+TBzragBG4NMwC8zsMbHShDlvx:rtS+TBzraRXb8zsMbUDlvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889177bf4237d72611f87ed06750125a_JaffaCakes118

Files

889177bf4237d72611f87ed06750125a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 348KB

IMAGE_SCN_MEM_READ

VProtect
Size: 284KB - Virtual size: 288KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 79KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

.!rc!
Size: - Virtual size: 28KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ