95f9c34c01af55be5746b6b83afdb51e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95f9c34c01af55be5746b6b83afdb51e_JaffaCakes118
Size

656KB
MD5

95f9c34c01af55be5746b6b83afdb51e
SHA1

7ede742da76812e2490e0842f9aad68e58b9f9cf
SHA256

793d45cef1510d2c97a65766e2588b964be576f17f6fba48a675600261bf089c
SHA512

6c1abad2e194ab5564573d699c075cf9ca518946045d238812f6b63e43825418f38535c36cc3fd492595baa442ae0b698c7ed31789b1d6ebf119ffe36575c736
SSDEEP

12288:jkwqB62lg5pvaTkf8MGh6F1nvCrDoqfI8w8HY/mbG6wATmzovqnBqo:jqQ2luvaQf8MGh6F1nvCrA8wJObGuTmd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f9c34c01af55be5746b6b83afdb51e_JaffaCakes118

Files

95f9c34c01af55be5746b6b83afdb51e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE