f4adeadf979ca15e452635d3e7744c1d_JaffaCakes118 | Triage

Sharing

General

Target

f4adeadf979ca15e452635d3e7744c1d_JaffaCakes118
Size

617KB
MD5

f4adeadf979ca15e452635d3e7744c1d
SHA1

ba71ad5bdfb964cca90e6f70ef73715d2b00b674
SHA256

486e8a35dfa56a424cf640d63f77bff480179f31d9b9e4ff84778ca01969dc33
SHA512

05fe484e4c66000a0a1618d5fd667dd64a097f69a090ca4b12495b8500c5c32b3d4900901aec5201d755848c717beda0f1be8108b795b34da91b6a70cff65df9
SSDEEP

12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHtbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHLj+CSfasO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4adeadf979ca15e452635d3e7744c1d_JaffaCakes118

Files

f4adeadf979ca15e452635d3e7744c1d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ