cec32691d32a4b4970224f7267d7d420_JaffaCakes118 | Triage

Sharing

General

Target

cec32691d32a4b4970224f7267d7d420_JaffaCakes118
Size

697KB
MD5

cec32691d32a4b4970224f7267d7d420
SHA1

ad23ccde901adfd9a28c7493b5c72ef7b97a4ea8
SHA256

8535c363d4dae6393d61bf975d6080dac938d38b8a0b8f9996c8cc3229383f77
SHA512

e6a267c97e476a3fa4146ef0d1e614f091598d8233a4e5b730fd4e9823b0d7d31197e233b15e40056761094ceb2de2af99a827c6cff7e3ef0b560f4018277777
SSDEEP

12288:bgbN+/aAySPlKWW5AlMc2kmYB6bvv0f0kMG6qGg5NJgvlUoKZvqoZOp88:bWMSs4WW5AlMcyYB8kf0kMG6TvlU/gon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cec32691d32a4b4970224f7267d7d420_JaffaCakes118

Files

cec32691d32a4b4970224f7267d7d420_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 535KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ