d9c7735438a05d78e7eae132f0dd91d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9c7735438a05d78e7eae132f0dd91d0_JaffaCakes118
Size

55KB
MD5

d9c7735438a05d78e7eae132f0dd91d0
SHA1

85fe1fd7baa9603208e44baf9e87c00ed38b09b7
SHA256

c316805d053a93986050b61ec14c91427235b15d23ec3688f6b81239ec587329
SHA512

b1b762118fe7844f6f245141efb9d0d349e403bda3ed6c5574fcd4f00af7d3a83b1198ceeebe90e53cff83f40a323552a68334e33c2debee3a53f88f6bd7c62a
SSDEEP

768:gCyqvQvWJb0O/DvIe+g3TdHzWiHCjMA5dQp9/JdwjMDyl995jSHmHBZBAnQ99m:HyqvQyb/DvI5eHzWiHCj/5dQr/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9c7735438a05d78e7eae132f0dd91d0_JaffaCakes118

Files

d9c7735438a05d78e7eae132f0dd91d0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ