cfd8e8ea7bcb4a24341e364979aad320_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfd8e8ea7bcb4a24341e364979aad320_JaffaCakes118
Size

317KB
MD5

cfd8e8ea7bcb4a24341e364979aad320
SHA1

1f9ac51b8d775b5e0d051a7f85aa8d5a9adc4ae5
SHA256

bd2f7b046fe41a464f5c1a0c63ab4a6f020dcc0369017515e7986889844dabb8
SHA512

5ab69dc3ecf69d4059e53189d0ce3ce8ebb3c8e608020d22b138ff31cd27afe54488fae1bd4b3453e26af709e6c6bfb3b7304db0335b6ab5e76757e547668a45
SSDEEP

6144:smgl8rhDM/2yT/CCX8ExJex5gfzDVlVXgaV:HU866dx5GpX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfd8e8ea7bcb4a24341e364979aad320_JaffaCakes118

Files

cfd8e8ea7bcb4a24341e364979aad320_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ