c014b97b06d10c30d3b212c27f9df168_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c014b97b06d10c30d3b212c27f9df168_JaffaCakes118
Size

176KB
MD5

c014b97b06d10c30d3b212c27f9df168
SHA1

b392e077dc741febf0891664b91ed765dd139eab
SHA256

14c619e056297d9fcf399b1a89093d11191e10f6282c564b9b72fb07578f92c0
SHA512

f01ba8bccfffbebb4176fe9e66704de75578537b2874d12964c0e800bcb04161182fefeb5f9afdf5c737847c0eaaeb86224198805c9da5f7c4e6bb0ede8e4681
SSDEEP

3072:LqoOQQjZ/WM09hlR9Ck1JjYRHXzBOT3rKTBC9zq9JcnKntmBxhKJ/8ug94:LqfQQjZ/WMG7JjIBOrKlWzqUhBrYga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c014b97b06d10c30d3b212c27f9df168_JaffaCakes118

Files

c014b97b06d10c30d3b212c27f9df168_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE