cf864466e207059113c749ffd74ed780_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf864466e207059113c749ffd74ed780_JaffaCakes118
Size

228KB
MD5

cf864466e207059113c749ffd74ed780
SHA1

976116c699da54450399788ad84807a69bb3f19a
SHA256

5fe0e3d505cda9c4b681ca50aae31e79f43a9c9625f85adbe1ce38d227b7324e
SHA512

579507341d71a975e94f1d92fce719767d2a7ea82fc2c86720d29fb4aadf437041bbcf22a9dfcb5243f40180a986b5e268d540cd1689f9b6f4a805900679cc1c
SSDEEP

3072:Fn3+4RNtpB/MgcUNnfw0bjcZcR+58uSeSMf6yJW5iQmwnFGw7FeIbCB6BwDT6qJ4:FnxNvB/t/tISeSFyJ+xF/FeIrGTVc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf864466e207059113c749ffd74ed780_JaffaCakes118

Files

cf864466e207059113c749ffd74ed780_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ