fa1a340b558b36eebd9b164632c19756_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa1a340b558b36eebd9b164632c19756_JaffaCakes118
Size

386KB
MD5

fa1a340b558b36eebd9b164632c19756
SHA1

ec6369cd9a49e5e656bf0e294e13df77fb11f826
SHA256

c8c967c34a5c20fc9f7a63be11321650c5ea49ad029e65f6fee15886f8f5acde
SHA512

dc3a2f3537274405e6405a1534cfa8fb8bc0899901743f85a14102bcf15f22478659b80132e6b23f40d15101aee99ff89928879ab15df8b2164679aef6b9dde4
SSDEEP

6144:7uR6uyD9InW7J86/3nb1mMJqbO5ZVfpzRDy93xPPQ0cn:7DuyD9WW7J80p1J/fR293xPP/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1a340b558b36eebd9b164632c19756_JaffaCakes118

Files

fa1a340b558b36eebd9b164632c19756_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ