b1f86c68379030af529973f850616f34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1f86c68379030af529973f850616f34_JaffaCakes118
Size

308KB
MD5

b1f86c68379030af529973f850616f34
SHA1

8dfa83727abd176701de4ef09d8916cbb7b9681b
SHA256

087b3b58032aeb49b004a0941e1b8bbc0cedab7c985ed91b6e6833b09c802255
SHA512

13a558245f344123d6b6f8b0e3937d230199a27662d981a92a55c084b3f6f51708bbee4ce44eee0aebc477523f1c631caceecbde70b2ee724b3b5173e7b6e41c
SSDEEP

6144:xhi0CPRpw8Nz20/B6pFtC/ozDVf1aKYvasd1fUiGcDhq7V3:x/6Rp5k8B6pFAwzDV0B4iVEx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1f86c68379030af529973f850616f34_JaffaCakes118

Files

b1f86c68379030af529973f850616f34_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 295KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE