b6eaef45634d4105a35c7bbc6e520be7_JaffaCakes118 | Triage

Sharing

General

Target

b6eaef45634d4105a35c7bbc6e520be7_JaffaCakes118
Size

112KB
MD5

b6eaef45634d4105a35c7bbc6e520be7
SHA1

30837c7e8fbd271ee53746ebf34921a74f60f44c
SHA256

0a068a9f429d8ce8e66e5c01cecc58ef7b6a88c5457769dba8b9cb0b912f8de0
SHA512

7d1efc318c26fe24b93174a621a1664450aad77c828821a76f4ee34d516adf27ea358af52793672e4f30a4da376c764b58c27b4d49f16cedf917fe2d336760cc
SSDEEP

1536:pyId1UMjRREf9d7JuOqGMiMIdTCd1zeIwZKxQ2xywr4mSKzpoS61cmFjAR3fNZ:pJ+Mz0fYrZiMVpqgQGF4nkpo/kVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6eaef45634d4105a35c7bbc6e520be7_JaffaCakes118

Files

b6eaef45634d4105a35c7bbc6e520be7_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ