ba7922b5d2d2c382cb3f5a755dc7a5a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba7922b5d2d2c382cb3f5a755dc7a5a4_JaffaCakes118
Size

66KB
MD5

ba7922b5d2d2c382cb3f5a755dc7a5a4
SHA1

cb8e7035ddee5d116a942807e91274b981029504
SHA256

0a4a8a7ee574e4ce2b91131673c7b2706c9bc5c25ee41e95905de2d1bbe17f2a
SHA512

fc6b4391f25a6ed5fd91925be6987266496b3c27e04db249aa919f9a4c934a27ebf789c062f81464cafb3076a47f0f11254bb66ce89cb764e9de6a2c1aee5e4b
SSDEEP

1536:pnq3QdPqI5MUm7Z4xWhhOq05tqA+U1sXK0/QCWNsb7:CQPqI5ml4MhyH4UKXbQBNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba7922b5d2d2c382cb3f5a755dc7a5a4_JaffaCakes118

Files

ba7922b5d2d2c382cb3f5a755dc7a5a4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ