bd74a103ab0bbb207dd1f0c02e0f7497_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd74a103ab0bbb207dd1f0c02e0f7497_JaffaCakes118
Size

228KB
MD5

bd74a103ab0bbb207dd1f0c02e0f7497
SHA1

a3486d51c5f5d056c30191e00d4056acc69022ed
SHA256

4f1695268525e3c2420411f693bbdc4e661ac1bc9bf3675a7a8b87bd4602aa00
SHA512

9b607f33a5bc7d8574f5c885236bc2dc83d29c62cf5e11141dc40575621ce2f0a4e76722db9a16bc91ecd319423af127b7107d131d2f0b157238091bbc6120e0
SSDEEP

6144:2nxNvB/t/trwM79k1Cn7Lv53xZuUjqzAirm:GxNvztMQke7DjqrS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd74a103ab0bbb207dd1f0c02e0f7497_JaffaCakes118

Files

bd74a103ab0bbb207dd1f0c02e0f7497_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ