c275f9bf9e8a1172f3f1abd31384a452_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c275f9bf9e8a1172f3f1abd31384a452_JaffaCakes118
Size

295KB
MD5

c275f9bf9e8a1172f3f1abd31384a452
SHA1

cb93101fd3462c0b63625dcfb83d152ce1c4f736
SHA256

9e8b60d6d2c50b362b6727bd114ed4c867fca60b8af2fa7b07c9a0fed074461c
SHA512

910b62b307e7ce7ebabab6cc0087f2f23d9dd70a5eb330a0d8369e6334d62cbc7cd8dafb94a31435e19ba255cd7dc861e7ff651a91f9931eb0ed7ec4d2ca6cc7
SSDEEP

6144:Walukjns8jb9+D+bNCKde/By7SQNPquG2ZF063E7LbRKSf:WOjjnNjb9+yxD0UHNV/wuE7RKSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c275f9bf9e8a1172f3f1abd31384a452_JaffaCakes118

Files

c275f9bf9e8a1172f3f1abd31384a452_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 282KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE