d18715f01bac73a7e9601beff2b53932_JaffaCakes118 | Triage

Sharing

General

Target

d18715f01bac73a7e9601beff2b53932_JaffaCakes118
Size

617KB
MD5

d18715f01bac73a7e9601beff2b53932
SHA1

a97a511b765ddf4774c3360f611d1bb35370ae09
SHA256

d6b204ae517dc388eaecc96d07d7525eba980daaa386f8ba01258ddd00a4e3a5
SHA512

e5de109cc50d2b9285e731b27ce4369faf61596ceb17b9373fb1df90486e7b835b5bdb365a4a052a9abc8b45922f081ddd5405a2cd793985117e4c210ea968e6
SSDEEP

12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHTbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHL9+CSfasO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
d18715f01bac73a7e9601beff2b53932_JaffaCakes118

Files

d18715f01bac73a7e9601beff2b53932_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ