ad6d41aa2daf8f6572009985d5c512cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad6d41aa2daf8f6572009985d5c512cd_JaffaCakes118
Size

74KB
MD5

ad6d41aa2daf8f6572009985d5c512cd
SHA1

41b0c2edb165d59b68c8ed35dd8739efbf408720
SHA256

7a871af84a9c8431e6c5987296692a27a1c42b5bab7b69548341888c1c797fd9
SHA512

4d9dbbce5a9bad7488fc3d8616cb1373c20f37f0bd461f2480b6443cb04145c73275925223770df17887334d9cabaf950075e00b05500cb59baa9f25eec4dd91
SSDEEP

1536:4HIVdVsvIELDbnwP3Vf1s5ip1y9E6NwcKNFNZ3eQ00:4HIJEf+Vua8pNwcKNJk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad6d41aa2daf8f6572009985d5c512cd_JaffaCakes118

Files

ad6d41aa2daf8f6572009985d5c512cd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ