d38fa403fedc6ad977f2da133b6efa81_JaffaCakes118 | Triage

Sharing

General

Target

d38fa403fedc6ad977f2da133b6efa81_JaffaCakes118
Size

617KB
MD5

d38fa403fedc6ad977f2da133b6efa81
SHA1

64ba644facf5bef4693c8c73d0a09373c5799689
SHA256

0246099bc148c5132783f7e5806a29301713ccd6efa8d18c5f919bf96b6d428f
SHA512

f5824f72d2feccdda542b212ac0d49c3007f1bf425fd4af41121787e6c392eb42ce4deaf52989e2ef84af16554afa0a45f9b5e13f28ade4e2f70e5fa37f4fe5b
SSDEEP

12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHTbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHL9+CSfasO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d38fa403fedc6ad977f2da133b6efa81_JaffaCakes118

Files

d38fa403fedc6ad977f2da133b6efa81_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ