aa14273f9dd0cbd7c57fda23fcf4bf64_JaffaCakes118 | Triage

Sharing

General

Target

aa14273f9dd0cbd7c57fda23fcf4bf64_JaffaCakes118
Size

59KB
MD5

aa14273f9dd0cbd7c57fda23fcf4bf64
SHA1

8bc7c6549cfa49ffb854f157c8e7395c05e1bfed
SHA256

036ee73ac045f323b12c12bb5f8fd7f601e280644ae06705df6b42a8508aa2f3
SHA512

33af058616f85d9325d191c7e42453bf04b43108d031046e7a0905e8bc65d282463ee684a0961d334b4f3e6d3a7c3d698e82d6ab879df50e0b14b10b65788cb9
SSDEEP

1536:ctel/fvKs161SBYYThD5JLdLqWn4qJHrGY2Co9gQTA2iVeYCsyU:cgl3vnm8YYl7d+WzrGX9gQTi0Y9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa14273f9dd0cbd7c57fda23fcf4bf64_JaffaCakes118

Files

aa14273f9dd0cbd7c57fda23fcf4bf64_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ