ea30194d200faba68c51215a3fb42dfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea30194d200faba68c51215a3fb42dfe_JaffaCakes118
Size

135KB
MD5

ea30194d200faba68c51215a3fb42dfe
SHA1

b90bba6b42f07eaa9c8004a15e8408f1a3822505
SHA256

47d45ece4521d109d1da750f99caf1f5339f17cf84b54ce43e140598c67bf51b
SHA512

0d20d81da9015fb41374cc6af90c3cccc5f15db4081da48d601d7d08be78dc7442b1b7d66ec3a136968332758a2657b5fbd4fc17397125cd66136d0b131cc828
SSDEEP

3072:LqoOQQjZ/WM09hlR9Ck1JjYRHXzBOT3rKTBC9zq9JcnI:LqfQQjZ/WMG7JjIBOrKlWzqUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea30194d200faba68c51215a3fb42dfe_JaffaCakes118

Files

ea30194d200faba68c51215a3fb42dfe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE