b0f2a5dc02f560454e4f9fc18653bb42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0f2a5dc02f560454e4f9fc18653bb42_JaffaCakes118
Size

80KB
MD5

b0f2a5dc02f560454e4f9fc18653bb42
SHA1

4aea6e560f327465da176d7f70a27846e29c1eff
SHA256

c9481abf40131e56cf2969c48d29b03e07c2137c5449b18358c3df023c741a63
SHA512

917ac731361ab8baff67895208092d8647dd4fa65014d493c9806daecd104603a3f0216b3ae5bc9a8038b487b72b1986821989135be9c9a9db977765a2b7fe27
SSDEEP

1536:4s2ULp104rYprEGDbUx+2+370MVw8E29wlAL+PDkT:MU110SYpw8UxF+3XjwlAL+P0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f2a5dc02f560454e4f9fc18653bb42_JaffaCakes118

Files

b0f2a5dc02f560454e4f9fc18653bb42_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 584KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ