feafc5f6f0f1af367a3556f3ea554048_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feafc5f6f0f1af367a3556f3ea554048_JaffaCakes118
Size

229KB
MD5

feafc5f6f0f1af367a3556f3ea554048
SHA1

55096c229c734e23c19bf7c36575b76c913ec321
SHA256

7ef3eec97902259f586ae1da18b4118d60e5d31e8933845e1a9ee104d0f68cbc
SHA512

da076db66a6c29d4062313d34ff68b4eaadb4ca6ee2363b82a6d6abd9b175bb82836ab17ac2ab913545dc480021a7d626e7a2ebf1241d8e068ad118359300495
SSDEEP

3072:cP+4Eg5qL4PT4YTWdwa+4YJn+P9HdMh0CPLXPvArwBf6wnEQvyh7T1M6Cs2YtLJ:AQ/Ob/bGQ0CTXPpt1nLyvNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feafc5f6f0f1af367a3556f3ea554048_JaffaCakes118

Files

feafc5f6f0f1af367a3556f3ea554048_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ