f0575cf3734a76fd2743d1aff4d48b3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0575cf3734a76fd2743d1aff4d48b3a_JaffaCakes118
Size

61KB
MD5

f0575cf3734a76fd2743d1aff4d48b3a
SHA1

8e5c9bd7328d0e890b38c1b8a746b970e29dac6f
SHA256

1893d7616748c323614b610f4eaab1935c85016184b3474902011d374339ff3f
SHA512

dd6fe530d5a4b21d9b0fe891a63f2d31fc24721cf06deebd9a95226f6ceea82bbfcfe5967d5c09e0591c0dd1874b890695b902482292267796127eda24b4a432
SSDEEP

1536:0+4hd1DYTVD3W4mBZABOEj74HSv9T21obmoy:0+I1DYhqDzDvHy9T21obe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0575cf3734a76fd2743d1aff4d48b3a_JaffaCakes118

Files

f0575cf3734a76fd2743d1aff4d48b3a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ