c2639311cd2af817fabbba5da29690a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2639311cd2af817fabbba5da29690a5_JaffaCakes118
Size

173KB
MD5

c2639311cd2af817fabbba5da29690a5
SHA1

90d05061fb481c3b61479b33fc41836bc1252e2c
SHA256

17869f2fc2a1974d969a79433ac7aa4ffa51f0ca92597821fefe01926381dc65
SHA512

4bbffea1c956d9f122d0f1c13a17095ebe4d1bf80bd0a3235276bbca033750e3c07711515e16ecb463fe7c24c91360ad373ea2683fbb6970f020a8fff996d1b2
SSDEEP

3072:SvlQ6hNb/7RoEjlgpXdXMspoA95p93t8XeOFt07CK0AvzrH8t:SvlQ8Nb/7RoKg1dXJKCYugtu2Avzz6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2639311cd2af817fabbba5da29690a5_JaffaCakes118

Files

c2639311cd2af817fabbba5da29690a5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ