afa396784facac205b2748a5d824fc23_JaffaCakes118 | Triage

Sharing

General

Target

afa396784facac205b2748a5d824fc23_JaffaCakes118
Size

64KB
MD5

afa396784facac205b2748a5d824fc23
SHA1

fbd6c9381205f65a07420ec6a033b0e5d0bf13e7
SHA256

1b8d1eb8204da7e71c0c90f8e3737e6bc37f2b01c9011cf3c9ece148934aa946
SHA512

efacb732014bb074e983f821593fe1173e2841f8a7192a887c872a4cf723d0fdb64e5f4031f573fd50227356cf79b1a9d061f5b6c58f936f505328e808730e06
SSDEEP

768:GTzbNwEKoqT3urd33AoV/lOqaZqsZqTwsyhbaiiPQMxy9yEGWfE1qhRFRoil9e5a:mB27T3Id33Aw/+dqksDiC4NDpVOjyOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afa396784facac205b2748a5d824fc23_JaffaCakes118

Files

afa396784facac205b2748a5d824fc23_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ