ddd1a9f64dadde0630b09b71cd675d5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd1a9f64dadde0630b09b71cd675d5b_JaffaCakes118
Size

93KB
MD5

ddd1a9f64dadde0630b09b71cd675d5b
SHA1

55bed9cfb89e1d2791e7bf77ea1d0a086e0b4600
SHA256

4488c8b05689f90ba16357c566e96b676575f0cb399e08160e4f6f575899cc27
SHA512

9dfbaa036d6d70bd3e141dd4fbb6f61a69d9c84467e5de603f50d2018812892ed2a24c8fe26d1097a373bc77239be8266634d63e444d5d3efcbe008d8da2c552
SSDEEP

1536:Hqq5xUQDGl8HrvHZeLUJjk9D3UYsfDR7Xsd/AciR7ZV+0Be7WD0v0sPzj9q:bxUyPvHcwJo9D3psfDR7XsdolR7t94ve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd1a9f64dadde0630b09b71cd675d5b_JaffaCakes118

Files

ddd1a9f64dadde0630b09b71cd675d5b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ