8e912a5528fda3f4d69593f1529c58d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e912a5528fda3f4d69593f1529c58d3_JaffaCakes118
Size

159KB
MD5

8e912a5528fda3f4d69593f1529c58d3
SHA1

bc974983ea62e606db7e4340febf42f5b489b886
SHA256

96659cba39208a603bb4a9f01f6048ef877c27d5cda747437c3dd1fcd45ce060
SHA512

32e45866ce1ab3d4e10fbd7fc80a966abd54840f38b8f8c0d7ce95d8c629cdbd701be71335115da32ea73b2ecfb67943093f49d3bd6f803637f0b82f0181c82f
SSDEEP

3072:LqoOQQjZ/WM09hlR9Ck1JjYRHXzBOT3rKTBC9zq9JcnKntmBxhKH:LqfQQjZ/WMG7JjIBOrKlWzqUhBrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e912a5528fda3f4d69593f1529c58d3_JaffaCakes118

Files

8e912a5528fda3f4d69593f1529c58d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE