ab17604c375ae7e31a9c666ecfc1afb2_JaffaCakes118 | Triage

Sharing

General

Target

ab17604c375ae7e31a9c666ecfc1afb2_JaffaCakes118
Size

21KB
MD5

ab17604c375ae7e31a9c666ecfc1afb2
SHA1

a174264d11f9b77bd6702c078ef93b36afc08271
SHA256

9b9f02f5f5fc452f16b86c500da2c354cb15e6ef949ebbc30a0902d7ff9f125c
SHA512

b8b6ca08938ae4b7725af6511763e900447b429f66f64d9e92f925130bbde3f7ec0d4d2fe3cad5344b875be3c343621887f9191ff4fb18dad650a6b0efbc7de1
SSDEEP

384:fncbQPWzOEq+yiVtI89APVDt5Hcm/Aclk/f1WCPb6cDGw/i94LWBzcVdE:EbDI8ChLHcPc+/f1xj6cbiTyd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab17604c375ae7e31a9c666ecfc1afb2_JaffaCakes118

Files

ab17604c375ae7e31a9c666ecfc1afb2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ