c81dc76fc20fc0c5080a29648fd256eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c81dc76fc20fc0c5080a29648fd256eb_JaffaCakes118
Size

114KB
MD5

c81dc76fc20fc0c5080a29648fd256eb
SHA1

502660a8cbad45e99fb588931ca6953b87523667
SHA256

ddb6437db9a35f5fee3c02646c949024b3dc55700c69fac8f07c1c8a5fc1a87e
SHA512

1706327aeb08796cde5d6608dd860c4511c6c64a49ba417eb9d36d147f818b2e29242b5b39891c4c94ff818d70c8d9d0bc33aafa80dd1a0c5d1dd33d0daae26c
SSDEEP

1536:Xy07a/EoaKaqPbpzYHrbIdt6xLhcbGO2WwFbwI37qB6Fw8vEm5KI3VWChaPocqR9:XyXEy5b6HIdApFtFbB3OovEfCs5Phm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c81dc76fc20fc0c5080a29648fd256eb_JaffaCakes118

Files

c81dc76fc20fc0c5080a29648fd256eb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ