eaf65a0ad5d21f1d3585187f89e94b8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf65a0ad5d21f1d3585187f89e94b8c_JaffaCakes118
Size

33KB
MD5

eaf65a0ad5d21f1d3585187f89e94b8c
SHA1

bb3f5e6b4dd9b0815ebdf7bec59c7d09260bd676
SHA256

e9ecc4b8b37443dfab0dc55f7a4c8ada1940b626c64290767422f90cd36de5a4
SHA512

eca70837ebeccd140cd258165ee963014a5795a45a4e65cd263fdf005fabb895c58fc0d0dbe3d42ae0ec6a65b5c5875fc35068bca4c0c27d757367cd1be9226d
SSDEEP

384:xWWzqUrEIQhRf/1gcmeLCxyHxjRA7HJNV20L5EPxL2xwNvh2iigBqQxfcVuzW4wb:4EjEIiFycmeL+yHdjYxOqQWwW4wuilh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf65a0ad5d21f1d3585187f89e94b8c_JaffaCakes118

Files

eaf65a0ad5d21f1d3585187f89e94b8c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ