fbf691809822742b032aa5b7120a6359_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbf691809822742b032aa5b7120a6359_JaffaCakes118
Size

61KB
MD5

fbf691809822742b032aa5b7120a6359
SHA1

1ae0d119757351d7eb0fd761529ee143451242a4
SHA256

19934dc09d68587f417e80f4944af9489d8d9bc719a2dd14b4a0b2f0859473cb
SHA512

242e717229e3210b5c50ef06b6b7e74f1875a2954f0457793843653a3bd9c6139554b5d21a28ae8b214e0cc4e19cb74422e94ceb80ac28e1c3a55647c43cdf6a
SSDEEP

1536:0+4hdRDYTVD3W4mBZABOEj74HSv9T21obmoy:0+IRDYhqDzDvHy9T21obe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbf691809822742b032aa5b7120a6359_JaffaCakes118

Files

fbf691809822742b032aa5b7120a6359_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ