ebd81ea603102d4d63fad7cbf83c8552_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebd81ea603102d4d63fad7cbf83c8552_JaffaCakes118
Size

110KB
MD5

ebd81ea603102d4d63fad7cbf83c8552
SHA1

68188d16418da852e02d98fb01a255b1c06fd554
SHA256

4f2f2eb96e64815377f18d59808438836bcc8484619460d102bbd00725e33de8
SHA512

43625976267ac48e0e364437f38282cad96411e9af8b6ef99094b274ba129fa2ba0b42f88e74a5d5c3f5c58233544a61210c1bc86724d988980a3936c3487f94
SSDEEP

3072:/C1vmgu5wBeFOYG2egBZLFS+3bzxNT2P1M6m:qhmg5AFOYG21BZdN87m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebd81ea603102d4d63fad7cbf83c8552_JaffaCakes118

Files

ebd81ea603102d4d63fad7cbf83c8552_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ