898a27717bed499caebdc9584a0310bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

898a27717bed499caebdc9584a0310bb_JaffaCakes118
Size

60KB
MD5

898a27717bed499caebdc9584a0310bb
SHA1

3cc8f29435d9e07f23891de62588c752f193b122
SHA256

ff8f4c98f747235070edeb089bba7637c888cc12a94169121f96bd7e16073ca5
SHA512

40b1f55f87b59a723de2263784f789ee6b6bcc01e23a3f3d619ba81ba7bf6775dee55fdf6bc9ab505bfd98457751b5788cd628884cdab01a70e66a63b67c98c0
SSDEEP

1536:dLn54onDzgoiUgYeTR0mZXhtUmkQt49XPQCl:d94eD9iGeVnxtBt49XPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
898a27717bed499caebdc9584a0310bb_JaffaCakes118

Files

898a27717bed499caebdc9584a0310bb_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ