e223096759a5d04d8fc7f85504cb7c15_JaffaCakes118 | Triage

Sharing

General

Target

e223096759a5d04d8fc7f85504cb7c15_JaffaCakes118
Size

614KB
MD5

e223096759a5d04d8fc7f85504cb7c15
SHA1

f82890dc47414add8f61e8048329fba0a9612054
SHA256

09538fca5599a6f36c59fd72cc42e1609edad23a908be2a8f8eeccc6002ab17f
SHA512

3230adc8c4c0538f6fad291d904faa614f0e368c9d6e44ff0906e53287de81b8c3f82547a53dad8791bdf76fcb9be8c94be9b5cfa330fe7e3a94c0d15887fb81
SSDEEP

12288:SYzchQVZnkmt/70MWugxPJZFpf0c1pHbbdJrs2xnd:d4KV5Hpt8bZHLFCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e223096759a5d04d8fc7f85504cb7c15_JaffaCakes118

Files

e223096759a5d04d8fc7f85504cb7c15_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ