a880d9632a01b1368a7610fb659879e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a880d9632a01b1368a7610fb659879e5_JaffaCakes118
Size

281KB
MD5

a880d9632a01b1368a7610fb659879e5
SHA1

4fdec9235c6cfcb0e4b6d54e72d21f05997fd314
SHA256

52010087a21981f9cd80c05e7bfadb1cd62c33b546b469d1e7f3a0c2dfa649b7
SHA512

b4f54fbc0e38b3da6a09370130f122ae9fcd1b81019b046b07d08e976c937f40300c3304ae160660f02a17357265128bf4ebf2649d2ace84afe149970d1aae87
SSDEEP

6144:M+btN6C5Qop1y87tC5RM9qocDW4lpVTgYO8D+:MqPQopY2oLM9qdDNlpWJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a880d9632a01b1368a7610fb659879e5_JaffaCakes118

Files

a880d9632a01b1368a7610fb659879e5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: - Virtual size: 720KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE