a589f84c6d73bca9dfba86ad1496b188_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a589f84c6d73bca9dfba86ad1496b188_JaffaCakes118
Size

51KB
MD5

a589f84c6d73bca9dfba86ad1496b188
SHA1

7c3675c92b74ee98ed40f4f0976a64c9f862aa0f
SHA256

8b791e1ee7430736059868f23ec0d0642a0aa22548c1df95b156a0148d0c16fc
SHA512

01fbd11215ef0255c6179c66e66b4c5a79ca23d52cc4da72ec3fe2ebdebf3a9d26d5cba02dad0789c1ee474fb58cdaee058a9da9ab027590f50fd5495d5aa799
SSDEEP

1536:en4ECsyBZkzHW68hjUT2hhhSSUF74PZcT4W:u4EwKH8hi2hhA74PZcTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a589f84c6d73bca9dfba86ad1496b188_JaffaCakes118

Files

a589f84c6d73bca9dfba86ad1496b188_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

EDATA
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 10KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ