d008e1b9c2be963816ea26e91c3c93d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d008e1b9c2be963816ea26e91c3c93d7_JaffaCakes118
Size

8KB
MD5

d008e1b9c2be963816ea26e91c3c93d7
SHA1

c7f7a44ba37dfa4fc6f075702b13f623e02dca89
SHA256

65d945dcd150656aef4c36bffb97075d0329668090fbe7535d8255a6554519d4
SHA512

d5584e34b09a47cb31199b93a0fbbac0d58fc770d42d595d00c57f52fd1ef9de79bfc650ab869a2eefc924709d5c8a50a40678706be7f520020079544e5e278f
SSDEEP

192:j/bPw6dTVHAWqLfmAWvjlKmTRwi5uv/K38bN9DnWPe42tr:bbPFdTVgLy1jXTKi5uvSMnDnKe4Ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d008e1b9c2be963816ea26e91c3c93d7_JaffaCakes118

Files

d008e1b9c2be963816ea26e91c3c93d7_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ