b1afec1539e53f395e00afbc1a143b13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1afec1539e53f395e00afbc1a143b13_JaffaCakes118
Size

278KB
MD5

b1afec1539e53f395e00afbc1a143b13
SHA1

4799f54594a1b62a423ea9fda5e5067b3d20e0b9
SHA256

ce2b2d56f5d07658b954295eb7960c0409fadb8d5d9ef8959071e552d8998ea5
SHA512

4fe2b66c1792f4ab5cd25bc5ee974553481d2e2b0f6f0dabe8bb3c55b79d603d929a22404f02c2a9b683584281772456d1f23f7dd1bb82199344909706001d77
SSDEEP

6144:FDbp/lbdw7TI45cVx60JzH2gSev1E/Elaa:Jbvbdw7T1aVxdtHX0ElV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1afec1539e53f395e00afbc1a143b13_JaffaCakes118

Files

b1afec1539e53f395e00afbc1a143b13_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ