d009e9f3226a1b4d4cf696976e9ac676_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d009e9f3226a1b4d4cf696976e9ac676_JaffaCakes118
Size

306KB
MD5

d009e9f3226a1b4d4cf696976e9ac676
SHA1

9568d644c23ff46a7460a19454cbdabf82f6cc73
SHA256

853485d5792ce9860b1f5cda333c67e13f604c03b825a12d6feda053cade55a0
SHA512

f25e3ef0b0346ed71cd93231c086847bcd45da8a14b35bceebfa0cebe97a610179a3e5a3446a37e8037cfc8a852e08ff47cfbf80c14c95586ade8cc7500e5c44
SSDEEP

6144:WVh8nTtvjK97Y9YZL5U+RMrd7iAxbLOUiNFfIvUaxZ2N9EocdFGpuJhqROPeXqv+:WvWtvjKVEWAxGTfIv3UN2GpXi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d009e9f3226a1b4d4cf696976e9ac676_JaffaCakes118

Files

d009e9f3226a1b4d4cf696976e9ac676_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 298KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE