d60b9bf3a1c5db8ae753af20c4fcbb57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60b9bf3a1c5db8ae753af20c4fcbb57_JaffaCakes118
Size

27KB
MD5

d60b9bf3a1c5db8ae753af20c4fcbb57
SHA1

e6a9ebf847c749b83ce1b981fb67869356083938
SHA256

1cd8b267ac4cf4c9f1dc4fa344f2c6a32d7c01b69913cc644937da0e1b9e321f
SHA512

6254b2434d05e2383923697be83ad71a3f56bf5e9d6613e6a77f78affda09838733365aacfea767e0283729af8c9da2c633bff5a66148ea10bedb20fbf15f9ad
SSDEEP

768:iKSkquZZ0GQhDlO9vmRZAgzdM/GHtdZw3:mkquZZ0GQ/t56/GHTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60b9bf3a1c5db8ae753af20c4fcbb57_JaffaCakes118

Files

d60b9bf3a1c5db8ae753af20c4fcbb57_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ