a84520a9aa70671aff0e4edab9a7d13c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a84520a9aa70671aff0e4edab9a7d13c_JaffaCakes118
Size

293KB
MD5

a84520a9aa70671aff0e4edab9a7d13c
SHA1

b0a566dace6d00d9b0061947b9e5daa52a62804f
SHA256

18e3e9fe0379451d0f8eafb52a0f35131aa710c645c8bc78242cd007c1b7c278
SHA512

32728470434e98fe0464a44c2c8d2effdd78d8c160b892824ff555f9c46a90fcd8fb2fcc3340f533871cc6f8ebe314efd5001b0db9eb9ad9dccd8ac6579841cd
SSDEEP

6144:YwNaeAVtdXkD5kXvlrecFfUes9fM4yLPOpfmV:YwN6jUD5kAcNUBfMrPOpfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a84520a9aa70671aff0e4edab9a7d13c_JaffaCakes118

Files

a84520a9aa70671aff0e4edab9a7d13c_JaffaCakes118
.dll windows:5 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ