00be6e324bb3f8e5266ad1ce10b6a859_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00be6e324bb3f8e5266ad1ce10b6a859_JaffaCakes118
Size

523KB
MD5

00be6e324bb3f8e5266ad1ce10b6a859
SHA1

8dfcfa1f93a36355b04a37f4c8c08d17006f4cc2
SHA256

312c9e185be2ee5bbf2358496e96efb1164bfdb608aa938a8be668ab69c10fb2
SHA512

a60862cd83246f7e27c1707d7fd45d9cca373064fcace0c329d9a0e24e28b6006bb4c8c85c67c46c74ec4447b56aa1e93e6bbb5e8e228b52cdcd7a95d3b21cc1
SSDEEP

768:aQ/2VVG6ApepoXTtLIzKsDtk2xkx01wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww2:a8Z9nTtCKsBlkxg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00be6e324bb3f8e5266ad1ce10b6a859_JaffaCakes118

Files

00be6e324bb3f8e5266ad1ce10b6a859_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ