8d4375cdc8d564f1bab589abed86d3a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d4375cdc8d564f1bab589abed86d3a1_JaffaCakes118
Size

57KB
MD5

8d4375cdc8d564f1bab589abed86d3a1
SHA1

af105211473db961b3c1aaa46e5b87190d5b35c8
SHA256

c11e50baf3c5c6b0d20a1dd0851616dd0491e146441d05d2d3ad448b4e1b9a43
SHA512

77aa32e50fbe8498924539ae6e14d767c9f30a1eb06ad51f80b962c1acd514aee42772942c2ae93452713df7c5abc99ae6a0280b3349bec98428c0cf96a98dc8
SSDEEP

1536:cG6mTJtM17ILA4upx5g0NvbaabT2d2+F1rLEL9P:cG6mTJdA4x0xtMzFpL8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d4375cdc8d564f1bab589abed86d3a1_JaffaCakes118

Files

8d4375cdc8d564f1bab589abed86d3a1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE