aeb31c96b636f64e26835a51b122096c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeb31c96b636f64e26835a51b122096c_JaffaCakes118
Size

288KB
MD5

aeb31c96b636f64e26835a51b122096c
SHA1

5ca9a6c9cbe3e0dd7599963eda59e6e70a6a6cf2
SHA256

2dd717905a04b146ca4562fdb054cf44aadd2ad7d779ff4447be935d4b7615ca
SHA512

8756c9db96062fe01528a1d4742dff90f3c3cf0a58fb7aafc8de8f5d34945293cf7211185ca08d79d354f566e1573d9131261b0f63bf4de7ed50341f603dfe14
SSDEEP

1536:9YOiHk1x4QianRgTzNlNGpaGfC9+Hs+FEjJ8hnbgo/33UctaPqvIaXrU808P:GHk1x4QianRg9lN99pA/32yQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeb31c96b636f64e26835a51b122096c_JaffaCakes118

Files

aeb31c96b636f64e26835a51b122096c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 791KB - Virtual size: 790KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ