fcc0ba12e5eb275afdc7447431f2f7a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcc0ba12e5eb275afdc7447431f2f7a4_JaffaCakes118
Size

1.2MB
MD5

fcc0ba12e5eb275afdc7447431f2f7a4
SHA1

79842163142360a291c0ee193eecfb47d72e8fca
SHA256

3b880b6547307d3668bb8a862988dd6a3dda2970ea687e6f8412a3f239200719
SHA512

de89f418454c4e81e67d67dc4e7f2549ee49d6909f85cd5a80f0b62e8a54ae48b8c4cc53aeffb95544037c16575c0adb6cb1ba75651b7c4c2b8c42bb05cbea14
SSDEEP

24576:vR3Pj26Vx/j+A3KyaNzPReL0RIBO73G3dbg6mjV2NJdTFKHci3x:J/j2yF6yWPD2073ids6Eaz5+Jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc0ba12e5eb275afdc7447431f2f7a4_JaffaCakes118

Files

fcc0ba12e5eb275afdc7447431f2f7a4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 986KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 157KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 86KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE