e2625eb820122b127f549db3a764a88c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2625eb820122b127f549db3a764a88c_JaffaCakes118
Size

78KB
MD5

e2625eb820122b127f549db3a764a88c
SHA1

e096a5da0e1e5a9ea626fe45ddbe5392774f92bd
SHA256

1314ed476959a61c9164b8440d94811906219c1bfc71ad5f194c1246c633f47b
SHA512

66bde20568383d5e9c19d68634cb067904772b6d793b8278194b9e82d2c3fcfb33dac6d2d7a08e5fffd23f944e8d100d16c8c33fb12ae315ad0fab034722d42a
SSDEEP

1536:7fDPz/GvwCborWN61JflX8LMmdgJlQT5mn0XyFT6qdC8a/Ni2SQ/Rso/5T:6oQOb8AmmJo5vXyFT3C8a/Ni2SQ/2oh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2625eb820122b127f549db3a764a88c_JaffaCakes118

Files

e2625eb820122b127f549db3a764a88c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 65KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE