f996f522005c3c7deeacf9f4e2a76da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f996f522005c3c7deeacf9f4e2a76da4_JaffaCakes118
Size

50KB
MD5

f996f522005c3c7deeacf9f4e2a76da4
SHA1

1808cb88c871846295ca91331ed9a38d9f1a3a79
SHA256

48b2289a30518c112f906f1f3dd93a0d4c54cea4eeea60bd0d1d4ee5daa5ade6
SHA512

3e44b4620fa2115ba85d864d3ed6a492415e70624afbd2a8ae5123973f511b7c807aa8873ef0d810540f22058905c209cf46efbce809df4e269ee1e78b02efac
SSDEEP

1536:Uie9UXRdT+9pSBbjYQ8EJHtl8YzPCEtkKDUmUla3agCJWF7K/hEsj:hnTepSNjYEJNeH4nDbfagCqKZn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f996f522005c3c7deeacf9f4e2a76da4_JaffaCakes118

Files

f996f522005c3c7deeacf9f4e2a76da4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 207KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 298B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 72B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ