d17732442e9df51a15bebb70ba630e11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d17732442e9df51a15bebb70ba630e11_JaffaCakes118
Size

64KB
MD5

d17732442e9df51a15bebb70ba630e11
SHA1

c0080c1a1e8f8e103ba7ffcbf6d07c2f5a2874d3
SHA256

20c491bfe4b9c69d97d8bc0596e366e108bc1615bd88a706a7230ada9ec1fbf8
SHA512

23431f4241de9a7b27aee8100d1104aece12c233655d6e633d3e2775299ae0f61a5cb89e68c6d6633e6fb381293993f7526878398904bcfd7536c507c7386746
SSDEEP

1536:6zmYwKZIOO0kTxdDdZmxSH0oFErSS1PYPXUiBiAOJ4QA7l1oZy0SZEY:6KRKETxxmxSH0oE7Gk5p4lh1ok0SZEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d17732442e9df51a15bebb70ba630e11_JaffaCakes118

Files

d17732442e9df51a15bebb70ba630e11_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vupncx
Size: 971B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ