a7154f6f8ffbf7789da9cf8a6f6669e9_JaffaCakes118 | Triage

Sharing

General

Target

a7154f6f8ffbf7789da9cf8a6f6669e9_JaffaCakes118
Size

614KB
MD5

a7154f6f8ffbf7789da9cf8a6f6669e9
SHA1

918044e83c21f943d9cdff04afe584ffcef604e4
SHA256

31ee0b7738ec6da2a8310d53150f52b472bc5f037c186ebcf2ee993a6f28f430
SHA512

dc43eda7a941c280026bb07d09d10a14620630c1e73225669c9a08e728b012f0684165c0a2f8c10430d6fe6aa0efd89ac9ea70a2f713253c5fc16306cf906b2d
SSDEEP

12288:SYzchQVZnkmt/70MWugxPJZFpf0c1pHmbdJrs2xnd:d4KV5Hpt8bZHL6CA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7154f6f8ffbf7789da9cf8a6f6669e9_JaffaCakes118

Files

a7154f6f8ffbf7789da9cf8a6f6669e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ