fb6a24be7561c97ac344f02b12714303_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb6a24be7561c97ac344f02b12714303_JaffaCakes118
Size

231KB
MD5

fb6a24be7561c97ac344f02b12714303
SHA1

630e14bdc7577825883d20cd6b8873940a07bcf2
SHA256

5b1c7439031cdd755bf65c50c7c6951ed36aa34d468d7eb328de22588c726f13
SHA512

8d80bcf0ceb8a820412c31c753b1671cbd7a39fdf62489f42eec3e6610af1e78da299864fdcf0e22205e5f6460169c66f9ea3a18f5527267a6aa689c0d616965
SSDEEP

6144:2Mb2gdVNDs20SzRcdaUl5DD5hmEM3/b/mu4:V9VZRG3DDOEM3/au4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb6a24be7561c97ac344f02b12714303_JaffaCakes118

Files

fb6a24be7561c97ac344f02b12714303_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ