fdabb932fad149a600b5f878e25e0de7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdabb932fad149a600b5f878e25e0de7_JaffaCakes118
Size

305KB
MD5

fdabb932fad149a600b5f878e25e0de7
SHA1

595c116baf7ff5aa9eb00c9e527371cf908fcd5f
SHA256

17259c09a10769cfb252799fb327320b0007ca12cb42131ed3ddfcb636746f7a
SHA512

eb23a66e292471ae89eed7550bf86d034c7bc909fd202f3ec4bf42feb3f8115979617ff29a14ad6a84bef274b316524371615b9bf9e404347e38e7b680e72e57
SSDEEP

6144:XCVEIHbyZaJ/vlVT8GZ8Lc5y9u3Qzh1xqk1ybQOiK6XPnjA9gIryh:umZ+7T8wf3QhTqk/K6/nE9/2h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdabb932fad149a600b5f878e25e0de7_JaffaCakes118

Files

fdabb932fad149a600b5f878e25e0de7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 293KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE