d5afe3a9cfe4a3e09a13ec044ad16fc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5afe3a9cfe4a3e09a13ec044ad16fc0_JaffaCakes118
Size

43KB
MD5

d5afe3a9cfe4a3e09a13ec044ad16fc0
SHA1

1131f817ef710d4bcf7524c523a4f475d7b0fcd6
SHA256

e13a1f854e1f40281a55be788be4dc4240398d66dd1778ca418bb986380695ad
SHA512

2030f95cd2b6c41eb50dce71e1bffcf13dd92fd118ab36477e1a04b739be2103222eb1f2f85d90a1292b6951fcfb45d408f72ad054503193387f52605b7d15e4
SSDEEP

768:cCIq9QejlwYG8oPHN44CAOWF7r0Kw+/Dof9bo5F+VdBP2R2kjzS2:rIq9QIlhGll7r0Kw+/qicVvn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5afe3a9cfe4a3e09a13ec044ad16fc0_JaffaCakes118

Files

d5afe3a9cfe4a3e09a13ec044ad16fc0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ