dc0b9d3c23dfaacd8c7243d78d109358_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc0b9d3c23dfaacd8c7243d78d109358_JaffaCakes118
Size

132KB
MD5

dc0b9d3c23dfaacd8c7243d78d109358
SHA1

dbd7cc0b4036fd8b3a47a4d0517274d817bdfbc6
SHA256

e259735fe3674ac4c9507533bc871ac76352b1a7d97c543cc1d93f3d05c19321
SHA512

3c5f846f23e1f7ed8bc91d1089c04db2142804d5502b96703940983dc08199d81d076bcee9df309fdb7958aff87e2d3e9c6f8a04a5d4e1f10cbaeef0a72843bf
SSDEEP

3072:h9bPncfp4+xB/W4nDbfagCqKZk5yY/Y/Z5OPTQu3nB2Tf:DnPo/W4nDWgRAkPYxcer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc0b9d3c23dfaacd8c7243d78d109358_JaffaCakes118

Files

dc0b9d3c23dfaacd8c7243d78d109358_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 214KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 284B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 72B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ