b78b5a65b076d7275162c6c1be30ba20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b78b5a65b076d7275162c6c1be30ba20_JaffaCakes118
Size

38KB
MD5

b78b5a65b076d7275162c6c1be30ba20
SHA1

2f9a10343dfe8c02c5da82645068cfa64add2ee3
SHA256

f0f14a5016c25f2d2663b22ecad55e0288dc7792ac42a8775751ade03f7d7fda
SHA512

9d436a70ecc435890f8aacb17e3e168c6d0be9e773e2a86fe61f8cdd216a85ac0ce9b4badbc5a64c7cc1ec62161ba9787ff6838647a562701699ce46522460b8
SSDEEP

768:Zki4BYEo8xHyqCwl5KZGwPGc/hF9AJp/B9IirELe9:ZdZWjYZD1P9K/BOMG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b78b5a65b076d7275162c6c1be30ba20_JaffaCakes118

Files

b78b5a65b076d7275162c6c1be30ba20_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ