8caca8e6924a575ade505189f1564f18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8caca8e6924a575ade505189f1564f18_JaffaCakes118
Size

196KB
MD5

8caca8e6924a575ade505189f1564f18
SHA1

5b5d1d43b5774fdc1ac47551e98b46c782be77b6
SHA256

b37df9b3823772271640920f232520e685d9beed3719581acd5b85e5d74927ec
SHA512

4de3b140ce25efb14f03613542c19fa49b9acdc6c475bedc1d78aa827870d29492f5abe5c88a6ae44384fbc41d08aca672f37e1d236344b03f9dfb3c611acdf5
SSDEEP

3072:TNAC5oFNXHjvEVJEwjKL95WPPIHBl+Jn4Y/T5GpBUshCcQ8sXs:TWB8PQHKJnFTV8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8caca8e6924a575ade505189f1564f18_JaffaCakes118

Files

8caca8e6924a575ade505189f1564f18_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ