d6b73ee3270d02dcbabd9b3d50f095df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b73ee3270d02dcbabd9b3d50f095df_JaffaCakes118
Size

127KB
MD5

d6b73ee3270d02dcbabd9b3d50f095df
SHA1

8a4d29ec9ad1b1013121713bbcc44ac306c1d9dc
SHA256

9593630b244510dca7c5db472a0fccb1bf561d51f6d0f826cc369fd29200bdfc
SHA512

08b41298059d2f67803aa13e39e3a158f36467266218b1994e5dbde876bad17377ca354e3ca61a2b1a6b64a4d8d2bb08e78d8ad9e8c56df9974c8ac32aa64b3c
SSDEEP

3072:8f7rgnY4VLn/+SBhomAK0Pn1J2B+95ne19nXL7kKGGXrh44VBMSBbE2JgcwU:4CY45nmSuK0Pn1gaeH3GGXrhHBMSBbEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b73ee3270d02dcbabd9b3d50f095df_JaffaCakes118

Files

d6b73ee3270d02dcbabd9b3d50f095df_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ