a5b64ab304cef02cae6dc850ef29013d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b64ab304cef02cae6dc850ef29013d_JaffaCakes118
Size

207KB
MD5

a5b64ab304cef02cae6dc850ef29013d
SHA1

5ccfb4729c0aa1b506e2d018e1125f898f1b93d2
SHA256

18987034eff06b5ecdafc18a170631388edc55743f66c079aa51dd6ada930950
SHA512

228f21a6eef2d0fe1cd0842141b498432130245423f48b964d8af02cc49926eb634d1f298ae92e509f3d02c86b79c893e7f29207530740756fd83c53ff9f7217
SSDEEP

3072:htGoJ1EzXAz1krxSogwdPPfP408gc49cB995LFsSTsZx48V/xunf5V:OoJGAWrTgUPf38gcr7GS4HVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b64ab304cef02cae6dc850ef29013d_JaffaCakes118

Files

a5b64ab304cef02cae6dc850ef29013d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ