b678cec90a6346830be68db330d0fdd2_JaffaCakes118 | Triage

Sharing

General

Target

b678cec90a6346830be68db330d0fdd2_JaffaCakes118
Size

228KB
MD5

b678cec90a6346830be68db330d0fdd2
SHA1

397514dd40c14e4192a09e677ddc8d9c846c17e5
SHA256

0d88f24a8518f8276c2d7fc953325cf12edb389924609a79c3b4e5263cb1506a
SHA512

89b8c59580800d7c16d0224ec2ed171a8a45288a4687a054b1f5b9a3c41a7bcbcce27fe40bce31d8dd096d9493a571604d66ad1034069ba1bb04a608c184033e
SSDEEP

3072:hn3+4RNtpB/MgcUNnfw0bjcZcR+5QuSeSMf6yJW5iQIY/nCioi4/q5lM6q+1:hnxNvB/t/tESeSFyJ+iOnCioi4C5lM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b678cec90a6346830be68db330d0fdd2_JaffaCakes118

Files

b678cec90a6346830be68db330d0fdd2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ