af05665eb024fa39398b1a4bbfc269c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af05665eb024fa39398b1a4bbfc269c7_JaffaCakes118
Size

560KB
MD5

af05665eb024fa39398b1a4bbfc269c7
SHA1

191d9b8cc10ce00182d01d145cc941a3b97ab737
SHA256

4761449fe0d65e0299ba24e78c3b1dcbf8ce1bd74eb17fa6e96d7027b793bc53
SHA512

0bbe84358a887183d521cd7e820d02226a6f38078a411ad52fcb215e1b896dee86ecc923afcb4b1542cc9817774e0f9b243364d1ce8afabf754d65abaf984ec5
SSDEEP

12288:htv1W0IFGiS5JeprW70QxcPJHRFLL+p6r0k2JC1RW8QRHCqmoRIvi:fM0PiQ85xRJ+U0Dy0EoRIvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af05665eb024fa39398b1a4bbfc269c7_JaffaCakes118

Files

af05665eb024fa39398b1a4bbfc269c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ