a3140f4cf3947612e4b5ba7ca0ece6a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3140f4cf3947612e4b5ba7ca0ece6a6_JaffaCakes118
Size

3.8MB
MD5

a3140f4cf3947612e4b5ba7ca0ece6a6
SHA1

1e15fbfbbf6a7540e060184a4b98522a21a8cc71
SHA256

47b6d8e3674ae8747b5361c73206522267bb8deae6cde1962bd84d265a25a0af
SHA512

56f2f22a9377c2eb19014ce6cdff2ee0a801858c90ff84da4f0e659cc99a46a18cff84ea7aa8b9c9c833ca36be8440e9356455e9cf4ab51d78456150a407566b
SSDEEP

6144:1S4wb+1qXjznSOl2y7YyMGMMj2PTQEo7ucyHW:cx+1qXjNo3V7Qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3140f4cf3947612e4b5ba7ca0ece6a6_JaffaCakes118

Files

a3140f4cf3947612e4b5ba7ca0ece6a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ