efa1997e2fa6b896851002b2cfecca1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efa1997e2fa6b896851002b2cfecca1b_JaffaCakes118
Size

134KB
MD5

efa1997e2fa6b896851002b2cfecca1b
SHA1

6a6396e0bfc0c76b2f799f49297dbdd1ca667352
SHA256

461706144c6fa6e7691af630ab8661f81dd2de1c444ae737a3765a174e2768bb
SHA512

b7c905ac18ce1647cf25523ff60c343010d37045a6a67b8fd192bd5949e544a73cea5ab5ef85a874faf4607b2d4f0fd3ccdbd5dd6a0e993fd88dcb45970751ac
SSDEEP

3072:cnXBQMcNd5fpFj9RSJg7exkTIYwaDzc+g:qXu55fnSjxkEvahg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efa1997e2fa6b896851002b2cfecca1b_JaffaCakes118

Files

efa1997e2fa6b896851002b2cfecca1b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE