8a567d5a9cdd61794f4f78a709c544ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a567d5a9cdd61794f4f78a709c544ea_JaffaCakes118
Size

185KB
MD5

8a567d5a9cdd61794f4f78a709c544ea
SHA1

b906b2c7e3b0e1d54ddcd5976c56e50599bf3216
SHA256

91126798e0fc1af2fec68329dd7588f735cdca4590ceed603ddfc1409c30fc57
SHA512

1b7a8686ddb6966f9ae7b5ae9d82f437cc228e7e58a5a10ba8cdb472d4adc6bdbbc9bd5e46016aa766671b7607ee4029553459f7c1ced77f9f411c91065fc602
SSDEEP

3072:ZIWRvzFWVr3a9RzxqG9aYaGygMdq9DM8zimaX4F8SNhzzfFGdCRZlyaeeR8XoxYu:2qvMh3a/YG9apGJo8XBzfF6qlLeePxW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a567d5a9cdd61794f4f78a709c544ea_JaffaCakes118

Files

8a567d5a9cdd61794f4f78a709c544ea_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ