b021a3582df29bb2f899ae8fdab1f11d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b021a3582df29bb2f899ae8fdab1f11d_JaffaCakes118
Size

1.2MB
MD5

b021a3582df29bb2f899ae8fdab1f11d
SHA1

a67828a40e91dee3f70d0613c46cd98fd52633e5
SHA256

43a520a29236798d60f8dd52470dfebb5d1fe601061d11cb87ba8f732dcf5d0f
SHA512

4206aa24b275f233081594e0c8e0f655725ea6a844f2c9d13d4a8f8cd5d359b5e8f258dcdf27be32d1380e97cc5c79a4a8a94d5a02e7c147a00bfe7abc6e5e8f
SSDEEP

24576:QgdXtwIkJnc8kphTW5AWWUG9obtwLpkM75HvCXtifnD2f3anTx1JdPXoqH:Dtw/hcx4GSwLUXt9+/JR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b021a3582df29bb2f899ae8fdab1f11d_JaffaCakes118

Files

b021a3582df29bb2f899ae8fdab1f11d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ