ea4bc88f4be72b31b29ada430280f261_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea4bc88f4be72b31b29ada430280f261_JaffaCakes118
Size

100KB
MD5

ea4bc88f4be72b31b29ada430280f261
SHA1

4934f20f76c2079aa1c7f92bdcfa0ba1f604d95f
SHA256

c9568290084f7a84e33ee82565dc3b7e80a1162c6bcf805f1a52460ce1271177
SHA512

256299a4928479c8876d5341fa2495b59c068089b87127bbfc99824b5a052aa966f1335c32d6b878f92c925b70415c1d172eba9d19ca94f65bebff078bda64b3
SSDEEP

768:VfWcvMjsrTh1QQZ579odHaPWM4Sepyhz6nwFC4inCVjm2vYUcqgNO5tp:VeAjrjZ+U74SEIz6PbCVjm2gURgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea4bc88f4be72b31b29ada430280f261_JaffaCakes118

Files

ea4bc88f4be72b31b29ada430280f261_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 29KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e_data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hostc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hosta
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hostb
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hostd
Size: 512B - Virtual size: 261B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ