b9906c01911f4c28aeb58544de507c59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9906c01911f4c28aeb58544de507c59_JaffaCakes118
Size

340KB
MD5

b9906c01911f4c28aeb58544de507c59
SHA1

4d0fb32aad08bd2776f97ff6c768c0dd72459bf7
SHA256

c18e4d78588f18d96bde1a43d354bdfed5ec620cb787375eae821bda7631c28d
SHA512

6694163fc31cd756a60ebb82a275303caf8903b69dcb8be1421a305ffaa1848c739cf91f3378e189962d90b017278b5ac118615e224c7f275697afbd1b0c95ec
SSDEEP

6144:qIIIIjwBUpepal8h77PeJUXUWO53jXqrdwSK8jVt88PLhOnb2VZuog:PBUFePeJeO53zqrdfVt88PLhOnb8ud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9906c01911f4c28aeb58544de507c59_JaffaCakes118

Files

b9906c01911f4c28aeb58544de507c59_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ