a0f37d857f5d94a577726a63423f1283_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f37d857f5d94a577726a63423f1283_JaffaCakes118
Size

114KB
MD5

a0f37d857f5d94a577726a63423f1283
SHA1

1b45cdfc18673b49a9b86c97ce6758d239288baa
SHA256

0faec3ec6e596bfcab5015549f31efca947193a5b14d3a4abcf2e43259d59470
SHA512

9462a0d205352275b8e95ac71bb181601425fdfdd4087aa0f1b0e44a05ed10a080070f27feb06c4f2473137369767d31fd89b936631d726b7955b78b175d280f
SSDEEP

3072:noSW+SNkd6ZmiKG+Hi0GwQtUoTUORN8zIisYd+F:nl8NkdEmiKli0GwQtxJQIiS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f37d857f5d94a577726a63423f1283_JaffaCakes118

Files

a0f37d857f5d94a577726a63423f1283_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ