dee09f18ba6ab8f6ecd5cbf7bebaf4cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dee09f18ba6ab8f6ecd5cbf7bebaf4cb_JaffaCakes118
Size

80KB
MD5

dee09f18ba6ab8f6ecd5cbf7bebaf4cb
SHA1

0f34f6350d53117afa9fbff13fa563ccf40b3a60
SHA256

899a084814c55ce094bba323f54ed902cb2ea6102126ba83a2851fd761961ec2
SHA512

89cc4f5f1c64a708000b98c9b3f4217ae6b9a7ec653f598ec5acc9ac00ea923dc47178b6bcdcb3dae201dcb136877b1054899dc3cc18e38feda0bef5103f011c
SSDEEP

1536:FUhedjjROANV8XdG9fSil0Ht+vTE49tK/Jm13y9jt1jisXRE:FXV0GWQ09/Q1CfwkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dee09f18ba6ab8f6ecd5cbf7bebaf4cb_JaffaCakes118

Files

dee09f18ba6ab8f6ecd5cbf7bebaf4cb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 501KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ