df0053baf9f033d3675c856dec26ada6_JaffaCakes118 | Triage

Sharing

General

Target

df0053baf9f033d3675c856dec26ada6_JaffaCakes118
Size

8KB
MD5

df0053baf9f033d3675c856dec26ada6
SHA1

88de3e1b59146af813c5363119820026da469147
SHA256

98306605fd1435396a71dc04db643f4e9fa7d3ded958034e1a3a827e8237414b
SHA512

4344473dbde2ad93d05ec6866eff81cea9848cd5f3895713e3291880481d4b15accda8c50477665fc0b5bd26c958962ea7752f1484df3f75663108004ecc5297
SSDEEP

96:nP+A/dChd6kwoSJNAngD+PLKIoyNSjcWTvRMPLx71ZEn:nR0hd5HUUtoyIjcWTOPxIn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df0053baf9f033d3675c856dec26ada6_JaffaCakes118

Files

df0053baf9f033d3675c856dec26ada6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ