d33071fc1679d0f9629bf6dd1633f56f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d33071fc1679d0f9629bf6dd1633f56f_JaffaCakes118
Size

199KB
MD5

d33071fc1679d0f9629bf6dd1633f56f
SHA1

13d85a65c7d6ff224a2b938454e517e524d94343
SHA256

681944ba73e82cffc2561e8a26cffb1e201ccb07f94920fc8504ce215dc9ef12
SHA512

795fc495432f87c8eb3714ed908ed1500cd1636f07456236be316b2db411992a1400fa944ddea32b91f9cd5c7b5753155bdaa84822e7a6425222138a4361cad5
SSDEEP

3072:IjOuiSvNibla6ztAJzqWGcCh7ECcfSOsOSjBDpwWiwKKaPUHprWz3af1:Ij1lgl9AtEgZlj2ni2Hpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33071fc1679d0f9629bf6dd1633f56f_JaffaCakes118

Files

d33071fc1679d0f9629bf6dd1633f56f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ