89a78362a6c40de2b16ba226c8de0dba_JaffaCakes118 | Triage

Sharing

General

Target

89a78362a6c40de2b16ba226c8de0dba_JaffaCakes118
Size

140KB
MD5

89a78362a6c40de2b16ba226c8de0dba
SHA1

8cfc65b814fa69e21f72f9d4918b1e57c170defa
SHA256

c1bf0c47402aaf18e1e7c5549f9982552a707777084e0d84ccf07c8953bcc449
SHA512

1812849d2aa34dfd6fbfc2a43f3f9cedc78f1efbf66b0e2f31087e92279c94ae3c7bde38ed72589010c9b0b40f50fddda7531c8b58298ed1d6d147b0f01b2cee
SSDEEP

3072:a/UdcGfAzCPAT4h/nMkg53RFKaYzKaYQCh/MyqK++:iUdcGYzQATs/n853++VT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a78362a6c40de2b16ba226c8de0dba_JaffaCakes118

Files

89a78362a6c40de2b16ba226c8de0dba_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddeh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ