88f10d101690a2073201b39bb900bade_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88f10d101690a2073201b39bb900bade_JaffaCakes118
Size

288KB
MD5

88f10d101690a2073201b39bb900bade
SHA1

da2f22beeedd048fc61c27b89f64490d3e27e23e
SHA256

6f90e365dc8edeabafafb15d176b35dc16210adaed6d8482f10d5fd0b3173bbc
SHA512

219462ab8f7bd3666727f72aa40e213f8a7326161aeb5d83f9a02f8fffa681957a3c9c9f9565711b33491c9013e0a8539a47c8c49c4cba2cc4d0fceb91eb2d50
SSDEEP

6144:1wJlMWwAl09tVeWbJQaGtyRL8ffiZJzi+7X:zWR04WbJQaGW7gYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88f10d101690a2073201b39bb900bade_JaffaCakes118

Files

88f10d101690a2073201b39bb900bade_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.EnterpriseServices.Wrapper.pdb

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbgmap
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.il
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ