d1d04fc0e36730ddb0e7a80c7d19bd12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1d04fc0e36730ddb0e7a80c7d19bd12_JaffaCakes118
Size

63KB
MD5

d1d04fc0e36730ddb0e7a80c7d19bd12
SHA1

4a7616e83aba6149f7d813bf3c4c2b97d1937128
SHA256

c487560588fd6444d4eb1f5ee9a27fbcfb6b7e159ad6f68d363b480423a4f467
SHA512

d18dfba0f1e5d03d84c0c16ffcb730cd47a20fa0725255fa489a5399eaa3691e11978f42c3d51ff0a5b86b4215b5b9306c28e5de31526c5d42fde0f8ce0c6e44
SSDEEP

768:ej3baTDbwaTyhu9zILwdVoCqN7ZdLSCAG:e7baTDb1TouOLOtqN7ZdLvA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1d04fc0e36730ddb0e7a80c7d19bd12_JaffaCakes118

Files

d1d04fc0e36730ddb0e7a80c7d19bd12_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ