d419b09e1668d2de93619a4ab762820c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d419b09e1668d2de93619a4ab762820c_JaffaCakes118
Size

724KB
MD5

d419b09e1668d2de93619a4ab762820c
SHA1

66aec51c77c9a42fa0b7725efc5f4bb8d9a14985
SHA256

fd34f590c5c1a70cc80741ed7b92b0ee6fd405b440d4d1259e888d130a89734f
SHA512

8648afb1c7cbe16413f3c3949660399089d5e345b9989caf3a2f0bc4a5ab5267dcaa819edb1e10910c3364341ff02524ffcbffcb658f614988199683d7dbe395
SSDEEP

12288:bmcr6wylSndHcYnnRY3XmBgrxMkifT3/i8VSsaztm39CI+ZjS14eAnnX6VXy6cK:bmcrgSneYnnRY3XcJ3/i8VQK0I+JnnK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d419b09e1668d2de93619a4ab762820c_JaffaCakes118

Files

d419b09e1668d2de93619a4ab762820c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 332B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ