fe109a6b95989ec8befe7aad66fde45e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe109a6b95989ec8befe7aad66fde45e_JaffaCakes118
Size

192KB
MD5

fe109a6b95989ec8befe7aad66fde45e
SHA1

c15a30402a39961639622b0500cce4e9c791bd3e
SHA256

c0c2f6895a3cd5ae7effedeb0f6c1a3af35c60ba74754a100aaa2a0f3e19d640
SHA512

a60a1e98c88e705462b09c71845ad28ec8dc84bfb6c3a9983b202f1857f8281c03730900a819c5385995f629a56ff128572553d176743a150347e5ccc8ba6b52
SSDEEP

6144:LqfQQjZ/WMG7JjIBOrKlWzqUhBrYgTYsyc:OFQM+JjIQaHgYg80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe109a6b95989ec8befe7aad66fde45e_JaffaCakes118

Files

fe109a6b95989ec8befe7aad66fde45e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE