c05092bd5513911194e4a989b090d12b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05092bd5513911194e4a989b090d12b_JaffaCakes118
Size

62KB
MD5

c05092bd5513911194e4a989b090d12b
SHA1

dd3f4cb43722dd3ff8081ec104867190efd3d05d
SHA256

d87778a441b3378222dc78fa5994c450563d68cc26739bf55638097398c7f2fa
SHA512

5ab01df51b196b177b65fca2d705c842a49649ae2ae490189bacc3972d59dfc53ac19903f6522ac6b361705f40e63814bc7fdec1ad45826bf9b62ccaa175675f
SSDEEP

1536:Kozw+OtbYJtro7aYDtL4DOY4BAEdNGPRE:Kozw+OqF4amtJtOEdoP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05092bd5513911194e4a989b090d12b_JaffaCakes118

Files

c05092bd5513911194e4a989b090d12b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 597KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ