f5772a640814b16cf5b091df07544b03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5772a640814b16cf5b091df07544b03_JaffaCakes118
Size

258KB
MD5

f5772a640814b16cf5b091df07544b03
SHA1

8a110bfe793100c636b59af82d6901bd75ab5441
SHA256

7ca8627246615ea248fce765ada8d872e809e949b46756a4274fda8e8280549b
SHA512

b2cfe8242e9a94761340db5e49bd4c9d295dc98223875067eb856718c2c80552358206c57e4f35bb6d029e53d2875ad10706e54c612be70f693551b680559a73
SSDEEP

3072:mLmnLRPek4NCxa9z0+djkvy+R9rRMfhslWaBP8pGaPvpCmT8sMcawPwgX9OukJye:LLiN/0+ADrRLWHJtMQE7OoIcihEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5772a640814b16cf5b091df07544b03_JaffaCakes118

Files

f5772a640814b16cf5b091df07544b03_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 345KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ