02e8e5efb2ceddd59ffe3c4f1f0c14d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e8e5efb2ceddd59ffe3c4f1f0c14d5_JaffaCakes118
Size

37KB
MD5

02e8e5efb2ceddd59ffe3c4f1f0c14d5
SHA1

34a0b293ae77ed91a65f0564172187b4dc60e4b2
SHA256

e917f81e0cbe89e05fe2679e010e61571f82e9142ec96ad61bfd2f695d17247b
SHA512

726430d40f4a9f1f077c7beb0cab374021205280bc92668ccc26d22aed7208f67fa7e77f7c46c5e370332814aafe5d9e7eeab1d9731459686d287b5e7abdbcf2
SSDEEP

768:xZX1O5o/No9g78XgOuQSbKw554vRqFbWbqi6CuAy29cr1ID4:xZFOC/NoaoQxQC4Z4aR6Cur2Or8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e8e5efb2ceddd59ffe3c4f1f0c14d5_JaffaCakes118

Files

02e8e5efb2ceddd59ffe3c4f1f0c14d5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.VVATA
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ