8ddd03ea356716d85db3377757efda3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ddd03ea356716d85db3377757efda3d_JaffaCakes118
Size

308KB
MD5

8ddd03ea356716d85db3377757efda3d
SHA1

5c8405b41c95ff690ca8d5eeb8d5f3cb9f38e048
SHA256

8351d89d2c4da1fc0d43f70c1f7fe83417748459e012f6e8ba8fa414116a83a8
SHA512

d147239f0f10b628f77ff5f5c0013bc8010403e26fe403016f9d040aa962838e2ba93f2cec22106cabb4660342b8c7f94c9c9a2c6b12f3cb5bb3b5f0de6331b1
SSDEEP

6144:4DdXXxM5soq536myD80AjsV7t+yh85lzaliMUs1cbv+cdT2D1xgLKuiJ:4DFXysoQKDwWLh8q4MXM92ZCLKlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ddd03ea356716d85db3377757efda3d_JaffaCakes118

Files

8ddd03ea356716d85db3377757efda3d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 295KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE