d75768c44c4f7da71d2642dbf59b5c37_JaffaCakes118 | Triage

Sharing

General

Target

d75768c44c4f7da71d2642dbf59b5c37_JaffaCakes118
Size

26KB
MD5

d75768c44c4f7da71d2642dbf59b5c37
SHA1

97d2e8ea4edcbcc480e0c0ae7d08ec3cc38664b4
SHA256

c9d734a2519a40c5e8567becd2cce26de2c76f852e40dc35023c685ce3c7eb85
SHA512

25672db41d616f15aab6eb91e1b146a331cc490a9cb44433744195ab18444bc055ef7e4ffd937a89a859bbf8521226aabacfd976e319d1430d6b78f5746c0a41
SSDEEP

768:vcmZNq4weJ6dlTf3RTRRRWDLhna5tEL97gjZrj+WU4W:lNqVe0dfQBL9sjZrSd/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d75768c44c4f7da71d2642dbf59b5c37_JaffaCakes118

Files

d75768c44c4f7da71d2642dbf59b5c37_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE