eb637d0ac74e2721706335490a1ae52b_JaffaCakes118 | Triage

Sharing

General

Target

eb637d0ac74e2721706335490a1ae52b_JaffaCakes118
Size

609KB
MD5

eb637d0ac74e2721706335490a1ae52b
SHA1

04820a8cfbbc9bdfaf7940cdd65e68ecbf9b51c4
SHA256

b2151c233e8f92c6545bcec6f4545ff5f6fc14560fa5ba84020d9600062db8ad
SHA512

d5ddd01fb73efa3040529ed5b6e456784653d44809f12661ae459520620c1e8fa2e0ff8b76816facda276f5ca1460f3ed8e8a17ec4660e7e83cf7d0069f90d0a
SSDEEP

12288:4YzchQVZnkmt/70MWugxPJZFpf0c1pH8bdJxUR9rNXZL4:L4KV5Hpt8bZHLknM919

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb637d0ac74e2721706335490a1ae52b_JaffaCakes118

Files

eb637d0ac74e2721706335490a1ae52b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ