ffd9b25b05958f0d6f3b8e0c1affd94a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd9b25b05958f0d6f3b8e0c1affd94a_JaffaCakes118
Size

19KB
MD5

ffd9b25b05958f0d6f3b8e0c1affd94a
SHA1

37709838b19b04bc83deacafd8e10e936830c566
SHA256

da07536a4330f0ecd236316caa25cd4c460002a9b72f4fdcb619223565e021be
SHA512

7fb75528e4ccf8465103109421f28d01b12c8b2c2308321705d541c70d64713a19eb1097bc4de244c6b542359f216aed0b61644db9c1f1cecfca48814cec1d9d
SSDEEP

384:FVU9/kvFaniKmzpl2YDIis8JYJ9YW2efTsp7kdmB2kqSYKSVN84gSI:DqkvERmzpm/D9NTLdmBfbYpVN8pSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd9b25b05958f0d6f3b8e0c1affd94a_JaffaCakes118

Files

ffd9b25b05958f0d6f3b8e0c1affd94a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1017KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ