f58d852c6250f38a84be027fbfd01c52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58d852c6250f38a84be027fbfd01c52_JaffaCakes118
Size

314KB
MD5

f58d852c6250f38a84be027fbfd01c52
SHA1

0f510b114ede5224701e6aa964c0b7507b1db230
SHA256

74bb0b5f52024fc61d65901f44eefc16f0dfaeb46bef1035f3f9b01fd02fb281
SHA512

0aff5265dd255320c6068c05ffeb91fbdc084b5a7b3cd2a6b087a41bb1caf98cce8200ce9ea6053f65360e1cd57394ee5bc7b23b75c954b1b85fa9fc17190018
SSDEEP

6144:evQiwJ9YzvwD7zrMeb2LlJhiC2fiaDiVYjjVqWvsTItk+4QfhHHsmgtA:eob9YzvwD7JWCKaemjxxXnRsmgK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f58d852c6250f38a84be027fbfd01c52_JaffaCakes118

Files

f58d852c6250f38a84be027fbfd01c52_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 182KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE