b8ee1372a8a8211944712904567e72fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8ee1372a8a8211944712904567e72fb_JaffaCakes118
Size

259KB
MD5

b8ee1372a8a8211944712904567e72fb
SHA1

65aa688adf53505e16f6584a3ff41c76daee7524
SHA256

3cdd7a87ab77fa48743f0e6cc0642ce7d8df02fd9234a747a5b950887d45c5f5
SHA512

bd708d1811e5e27aaa37852100aee08444e1ba4f8742747fcbc4f25eeb4a6f5c03328c08139b52b55d155ebda9b268bd3dddda35f0d1d29307ff9669f7695715
SSDEEP

3072:cediGrgLUoPxdz1D41D1SBi9r8vnpzUIuHCV5QW0j40KBWpbWuP8N3JLUsY/NS16:HkUKTByIuiwW70KEt6JLUsY/Nr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8ee1372a8a8211944712904567e72fb_JaffaCakes118

Files

b8ee1372a8a8211944712904567e72fb_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 609KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ