890e189cb914d02485f95832bcf0fb42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

890e189cb914d02485f95832bcf0fb42_JaffaCakes118
Size

104KB
MD5

890e189cb914d02485f95832bcf0fb42
SHA1

de6b049465004db724bbeed6714b9f8acec10a7c
SHA256

4d0919e43e3a6be8412e3d5c9cf35417030fcfcdedeec0a595c18f9c601b2972
SHA512

7ffcfc54f6aeba5cfd46c4812f1ad51d12d2a145c3561a9ff758f678dd4aabadeb3dea5f8368b4f5e8dae73b0352f9447eb57dd0550d8ecb5757697012a59c45
SSDEEP

3072:T5CJZnfMrGGqm2+6/FKp9BEgQIy3yI1Lo5z382FL2:T5U5d31NiL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
890e189cb914d02485f95832bcf0fb42_JaffaCakes118

Files

890e189cb914d02485f95832bcf0fb42_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ