b3335493dec4bb6c1c355958f43493f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3335493dec4bb6c1c355958f43493f1_JaffaCakes118
Size

394KB
MD5

b3335493dec4bb6c1c355958f43493f1
SHA1

4afcc143c6ca4d917ec8b78c47c49a5951be779b
SHA256

6138cf1ee81006a0bf4b8cef3cfb2bc638af694b2dd5ab6d52ac3bf31c4d17ec
SHA512

b53bb68afec9e32c78dda8a54bfbe7a310f443017afbe7d66f255b80dd78a0b5250a369b9645839c404406dcf6e37ab038c0f294073d6fba3a2188c65ce49001
SSDEEP

12288:KeMSAJMwSFFrqfbjPG6P0+2tRRxSA2k8n5QaDPumDU6D/se8fSugT1On7V7M7OMI:aJMVFGbjPGwKDbNy74eS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3335493dec4bb6c1c355958f43493f1_JaffaCakes118

Files

b3335493dec4bb6c1c355958f43493f1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 952KB - Virtual size: 951KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 796KB - Virtual size: 794KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ