a246dc37aa0b98a4aa8591df82b71e9f_JaffaCakes118 | Triage

Sharing

General

Target

a246dc37aa0b98a4aa8591df82b71e9f_JaffaCakes118
Size

526KB
MD5

a246dc37aa0b98a4aa8591df82b71e9f
SHA1

57bd598e2376af5bca141be2f4427157e19d6c50
SHA256

9579daf62fd887699964cb815aa9de6e483fbf3bfc4d1b5d21e35edcdd5e9ced
SHA512

454d559dda014d53a7d85ae1ef50d045e87e7301cf1e6ba76b6edf372f0d1f55e67ec4035341365245745cbde452b4c66e4164ecc3299098e1711810abbae28f
SSDEEP

12288:m5Sdm/puZjmmo62h7awfd7MN1weTZQDK:mE+Nmo1I0dEQD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a246dc37aa0b98a4aa8591df82b71e9f_JaffaCakes118

Files

a246dc37aa0b98a4aa8591df82b71e9f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ