dd32c235dc3fa4dff11d6aa679f74483_JaffaCakes118 | Triage

Sharing

General

Target

dd32c235dc3fa4dff11d6aa679f74483_JaffaCakes118
Size

186KB
MD5

dd32c235dc3fa4dff11d6aa679f74483
SHA1

75067f84f325c33a98a74eedde4bf343eafa6573
SHA256

7da12f1779379387c088b7d0025e108df97499f651ff57dfd22535086ea17a5c
SHA512

53d1906a576e4af8669a457df60d7b0ba661e77a7d3c69f16feb73ea3e5a213234dbc3a830541d5f731cc146a4372709acfb30501d745a5f3a8a2bcb26bf2d96
SSDEEP

3072:VPmNaB8q1eMaf8UjEN1G7cpTXQr4NeAlIB8brdAgJKRVoxDcMExIC1:VPAAeHkvN9ArdAOcrWgJUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd32c235dc3fa4dff11d6aa679f74483_JaffaCakes118

Files

dd32c235dc3fa4dff11d6aa679f74483_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ