ab798a02c5bfa66722d659b412be3a37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab798a02c5bfa66722d659b412be3a37_JaffaCakes118
Size

36KB
MD5

ab798a02c5bfa66722d659b412be3a37
SHA1

d878b63a73a4023c8caad284863a45a6ef3e8cd9
SHA256

d1bd1c4c788b46a1fdb64ae3f37eef888c994922088bbda860a3f5aa89d9368d
SHA512

331d5d0757ecbf59ba23a8a94e451bb2e97935ea5f829f5c344c30030fdea542b31b8a46aca108ce0c452f11b8f85e9a3ef06f721f2391dba5722e8e13697a6e
SSDEEP

768:ZOzMHmC8lTPx9Dt0ibDkTVp73VIiL/8z0w0hlfE68wKPZV1DTjp9G0BfwzlqnOLM:4wHmC8ldFt0ibDkTj3VIg0zpulfH8wK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab798a02c5bfa66722d659b412be3a37_JaffaCakes118

Files

ab798a02c5bfa66722d659b412be3a37_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rloc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ