a986f89f64d11002fd349c96eb9c9f9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a986f89f64d11002fd349c96eb9c9f9c_JaffaCakes118
Size

320KB
MD5

a986f89f64d11002fd349c96eb9c9f9c
SHA1

9ece4e1a946d53aa726cce2c9d9d6b3b20e944eb
SHA256

486ae38cd6d3223bf69686182fdd874b805f81e1ed47bfe14deee7958fe15e39
SHA512

751c17e1f691cb94068f823bdaadc29fe054d46f6f504d066f36b0f890313320940482202c46cd1e563329d3cf9ce98c7ecd5ecd51e86c64d2cc2719ac266fc3
SSDEEP

6144:0LWNtv1W01fvKFGiS5hvqRpXz/AKKYv850W7nMNQxcNeMJqxaCSfljP20:xtv1W0IFGiS5JeprW70QxcPJHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a986f89f64d11002fd349c96eb9c9f9c_JaffaCakes118

Files

a986f89f64d11002fd349c96eb9c9f9c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ