cfa241431e0b3d0ccd0a4b5095c78eab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfa241431e0b3d0ccd0a4b5095c78eab_JaffaCakes118
Size

63KB
MD5

cfa241431e0b3d0ccd0a4b5095c78eab
SHA1

5b884b5c114c7b43982d7a31b5bb581e7608f89e
SHA256

9627b330f330323c909037827ea74a41259cf60e446a204010534b1d324fe4c6
SHA512

b075e5f2663a727697bd0ee82fc765ddc8d0aedad666a667450b2b16cab92f65ad685e08b1268e090c17b4a3137c73a2222c6906043e24dbcef5164b978948b7
SSDEEP

1536:cG6mTJtM17ILA4upx5g0NvbaabT2d2+F1rLEL9F5gQ5x:cG6mTJdA4x0xtMzFpL8Vl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfa241431e0b3d0ccd0a4b5095c78eab_JaffaCakes118

Files

cfa241431e0b3d0ccd0a4b5095c78eab_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE