8fb92e03bea5b8b99421cb1ebdf5c445_JaffaCakes118 | Triage

Sharing

General

Target

8fb92e03bea5b8b99421cb1ebdf5c445_JaffaCakes118
Size

614KB
MD5

8fb92e03bea5b8b99421cb1ebdf5c445
SHA1

ad7eabf620943211ca0515d6b05c548c44508cf0
SHA256

463374242db463b12ee21be98b816854d7267b8b1c83bf5d401c14d20e4364cc
SHA512

4edc2a5d3900bf1db0dd4bf0d2304a910c77b48a309b861fc4b97a006a04378b2ef7a7de70548f5878bbd3fde23f4c0522ac5bf34823407dca2b9aea66afbc7b
SSDEEP

12288:SYzchQVZnkmt/70MWugxPJZFpf0c1pHGbdJrs2xnd:d4KV5Hpt8bZHLaCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb92e03bea5b8b99421cb1ebdf5c445_JaffaCakes118

Files

8fb92e03bea5b8b99421cb1ebdf5c445_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ