ea15759e4f6d5d4fea2c8dc2193f38a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea15759e4f6d5d4fea2c8dc2193f38a7_JaffaCakes118
Size

75KB
MD5

ea15759e4f6d5d4fea2c8dc2193f38a7
SHA1

a84ca31c956605de31a80383b19485ca2a885a7a
SHA256

4464a6e7aa3d555a3a5c6a614fe4e0039bd7a3b196881da82c8b8c9ab0c61801
SHA512

d25b0ea281bd963f9cdaa5254fedfeb4160cb50d81265e7813130ebbfb1038f15bc0c06fa67b51e424af73ae5c6311b70934c6247be56dedbb0da2f7768e09f3
SSDEEP

48:CeNCLvU0waFSD6YUUf4hXeeS4dSo90iS1/3Is4ielARdggftqy3At:8s1aF+6YdqXeZ4dS+M/74immgC3M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea15759e4f6d5d4fea2c8dc2193f38a7_JaffaCakes118

Files

ea15759e4f6d5d4fea2c8dc2193f38a7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ