d3270b5e4e258660aa0d1d18603ad009_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3270b5e4e258660aa0d1d18603ad009_JaffaCakes118
Size

90KB
MD5

d3270b5e4e258660aa0d1d18603ad009
SHA1

4a6cef9966c3d6caea90ac607b5030dd94bccbfb
SHA256

de8ed9c383f910a8926f0a1ede8be541b0d83b8d493269864e90c4ebed30cc6e
SHA512

45fb76b83c03af3c7436dfe6ada25f8e100bf3086c23aff6fbb685f9071b33b3a591c386343c5b30f3d02e5d087cebbe84eacdcb6f074ed7e5131c448f860b3f
SSDEEP

1536:y0qXQbn/FaX1VMMirZ7BtXjlJciIwcqpxWjxiX4oCY6OMCHT:qAn/svM3d7nXj3IwPpYjYXfl6xCHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3270b5e4e258660aa0d1d18603ad009_JaffaCakes118

Files

d3270b5e4e258660aa0d1d18603ad009_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ