daa1e947060983bc17a420a7b5e2016c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daa1e947060983bc17a420a7b5e2016c_JaffaCakes118
Size

120KB
MD5

daa1e947060983bc17a420a7b5e2016c
SHA1

0da466a1002a621e048fdfd07dc0738d357cb787
SHA256

9ce778176fca1030215614e1ca235e5fca4c3c560979f0ab8c314d7bd2507dbe
SHA512

23f9b48306d7c830fec77a8a7c59a87a1227b2ec0a4bea5553bfef224a5b75066d4f26c9c054f275fc83ee7d3c2bb229d1b4a3ef99e315ac3938752b4bed3071
SSDEEP

3072:rnhG7Xtr7YNIMNGp6uy+MXlNwf831HWkXqc:jhq9rn+q6uy+KlNwqHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa1e947060983bc17a420a7b5e2016c_JaffaCakes118

Files

daa1e947060983bc17a420a7b5e2016c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ