ae34bfa1c391be79a80324fdc24307c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae34bfa1c391be79a80324fdc24307c6_JaffaCakes118
Size

104KB
MD5

ae34bfa1c391be79a80324fdc24307c6
SHA1

b9a7fb2f4d0fbd3d355cd3da563d4291bdcb5164
SHA256

365e68a72524d625f9f2f889720bcb318802797a7315b9db1ef6366bbe3f1c37
SHA512

928bb606a78cfe439c23c59defb8a014e810d8866701bd0e595a93c1f95b423987b20fb440d5a5c0df6e668b93fcde3b4192a2c1f232c08ed4560494ddc9c9b2
SSDEEP

1536:JWkq4QOA20SX6Oh6loKmM+Ym79czzkzsJ+c1UGMPLmYfsiELImDMxnx:rT8lLmM+Z7949+GMDmYfpmDMxnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae34bfa1c391be79a80324fdc24307c6_JaffaCakes118

Files

ae34bfa1c391be79a80324fdc24307c6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ