943f7ef13f43eff583376126337ba458_JaffaCakes118 | Triage

Sharing

General

Target

943f7ef13f43eff583376126337ba458_JaffaCakes118
Size

87KB
MD5

943f7ef13f43eff583376126337ba458
SHA1

803b094b5ffd2d8c6d867abf3e6c791c9c04ecba
SHA256

4455e954498010e27808e477b73e0417b0e6312503011b5254563784ae29ce86
SHA512

57e00799583a5ed1e5a0fc3a87264e570f498ccf5159a45707563d12814e44abf2724985b8a39815f778fead568fe06c606662457bcca436d1bd18c12405dc3f
SSDEEP

1536:cG6mTJtM17ILA4upx5g0NvbaabT2d2+F1rLEL9F5gQ5VkxMC2wOLQMGt2:cG6mTJdA4x0xtMzFpL8VWxN2dLQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
943f7ef13f43eff583376126337ba458_JaffaCakes118

Files

943f7ef13f43eff583376126337ba458_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE