fb8c1d957eb887787b5a409feed38424_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8c1d957eb887787b5a409feed38424_JaffaCakes118
Size

305KB
MD5

fb8c1d957eb887787b5a409feed38424
SHA1

2e7a71e63874f20cd0388637eec9552def446d3a
SHA256

4778697f3c288d515e3e442417c77de5ec770a582ce0a6bbb60594087e2a7e40
SHA512

3a5fc03c2a2d2b1e12770f5261f160cbbc6b919d64e97230082c82dc57950d86e71d7229034a6e3fb14212189a000cc8bf5ad40d3fb17c62740692ab768933b0
SSDEEP

6144:XCVEIHbyZaJ/vlVT8GZ8Lc5y9u3Qzh1xqk1ybQOiK6XPnjA9gIriM:umZ+7T8wf3QhTqk/K6/nE9/uM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8c1d957eb887787b5a409feed38424_JaffaCakes118

Files

fb8c1d957eb887787b5a409feed38424_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 293KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE