d5c6a58ec0ef7a54d9da6dfb9a409d96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c6a58ec0ef7a54d9da6dfb9a409d96_JaffaCakes118
Size

90KB
MD5

d5c6a58ec0ef7a54d9da6dfb9a409d96
SHA1

83c12dd6439eb488bce937717555b45ee6712270
SHA256

89d6b1ae324ba9e32871a4f143a6a9c6e74ec721df5a85daac09ddbe8a3b1283
SHA512

2446b5b1e9fd03fcd4abb3180c967fc05532f4af47d73d969d88eefd5335614fb72035e862ce0f2acc3a3e8372af1189b0708dd93a5eaf2cff4ad5efb36d2144
SSDEEP

1536:kVPiERb9C1QdOh4uwFLw21zleMa4Fwgni4UrY1/bZfHKd3LBSzc:SPiYsQQRILwetXFlPfHKd3LBSzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c6a58ec0ef7a54d9da6dfb9a409d96_JaffaCakes118

Files

d5c6a58ec0ef7a54d9da6dfb9a409d96_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nanyao
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ