fad4d0e8753a27b9b3d41a551b02b3c2_JaffaCakes118 | Triage

Sharing

General

Target

fad4d0e8753a27b9b3d41a551b02b3c2_JaffaCakes118
Size

557KB
MD5

fad4d0e8753a27b9b3d41a551b02b3c2
SHA1

541bf47cda9320b211c2ec8e7181494d91e05ae4
SHA256

d0ba9cde1f22bdd7127cc76a39160bd609305c385a73aeb6db6f6d6c715b2b8c
SHA512

7f34ea4b241cb2acb2520cc8fc839428d5a64044feed30e53f813c1d49b677bcc3e354c4d16c901f0bbae6b3bc65c91f9c026b60f91fd0a2274d1870e6be8b9f
SSDEEP

12288:pejZajIgLfUzvSAAPZOFS6hr9zVPaMh9dysXnw:pe9aNfUzvSDPMFS6hr9n5Xn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad4d0e8753a27b9b3d41a551b02b3c2_JaffaCakes118

Files

fad4d0e8753a27b9b3d41a551b02b3c2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 473KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ