af43341f56742c032a4fe445dbd3f2b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af43341f56742c032a4fe445dbd3f2b3_JaffaCakes118
Size

448KB
MD5

af43341f56742c032a4fe445dbd3f2b3
SHA1

50dd3c0566935b9c87cc8da7433af41a182bc7b7
SHA256

595e338bfa2269b185ca18d9a40865cd2106ace0825ac076197a70854e711e00
SHA512

94c5e441073ae61866ee016fad124293d7ca6f719e01d80b38083acae300ac02ddb286b4acc338f621d93e5ad895d6ce4d33d54bc08001908db4e0da6a5ef137
SSDEEP

6144:76/T3+HPIWB1Hgut4uvYsR7W6OTlb/LwpcX85aBVcqVju0XMfjTaoLW9Y38Sq1ME:u/T3+HlAubvYsR7W6mcqo5TaA8qy7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af43341f56742c032a4fe445dbd3f2b3_JaffaCakes118

Files

af43341f56742c032a4fe445dbd3f2b3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 792KB - Virtual size: 790KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CONST
Size: 4KB - Virtual size: 31B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 412KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ