f5f5a055dcf60ace5a8689650446e07c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f5a055dcf60ace5a8689650446e07c_JaffaCakes118
Size

2.9MB
MD5

f5f5a055dcf60ace5a8689650446e07c
SHA1

650a471b66885346eb4f2f09bccf84eeaee2fb61
SHA256

bc5d40721a4dcf8e380403a8419a17c2cdee356a793132613c86d0e89b44083f
SHA512

7807a30a95206c10c5c809748e1a1644ae69d0b1e40c2cdde79a9139a35ec131bf541596d0e0192d04fc125c9977d78abc5d5ccbcc607a808014b0f728cd5ac6
SSDEEP

6144:1S4wb+1qXjznSOl2y7YyMGMMj2PTQEo7ucyHW:cx+1qXjNo3V7Qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f5a055dcf60ace5a8689650446e07c_JaffaCakes118

Files

f5f5a055dcf60ace5a8689650446e07c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ