d6202fa95d6065d4a9da7c03f2220e04_JaffaCakes118 | Triage

Sharing

General

Target

d6202fa95d6065d4a9da7c03f2220e04_JaffaCakes118
Size

70KB
MD5

d6202fa95d6065d4a9da7c03f2220e04
SHA1

0163142a3a8a690d86036a17e877e0e5b409db0c
SHA256

499dd0ad35de73b1aa16b3a11198f9c9f873ee3e8976e7a0ef0b07813e406048
SHA512

7bac7652485bb771f7d3ef80cc93bb182d9454d215dca07c0b6afab8953f1215d5c19aad6d845151e74b92eb8ef66be502e075d6ef19fc3b83fdd481d50fbf7f
SSDEEP

1536:lNqVe0dfQBL9sjZrSdKWMkpY+lvBhBvRugZ8JCr1JN5YRjhnH:LqoOQQjZ/WM09hlR9Ck1JjYRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6202fa95d6065d4a9da7c03f2220e04_JaffaCakes118

Files

d6202fa95d6065d4a9da7c03f2220e04_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE