044342ab1e662951dc8c2da159cd1b1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044342ab1e662951dc8c2da159cd1b1a_JaffaCakes118
Size

44KB
MD5

044342ab1e662951dc8c2da159cd1b1a
SHA1

ea5c0135bb9d92cbc10cf51c0b858e3efe1b8bcb
SHA256

e263e0055b597bdaada88f6935d5ffe65fb2a0e22490d35e6948c3ab913bb47d
SHA512

2a5bb6ce64def788ed3903d674b91498047af372d45d5e48f63b38f8ebaaa7fc1e10bbce379e783311dc615c8efa91357919b5c2058c729a56bd0be614de2265
SSDEEP

768:9NbDOtTrLYtNMvV5KDu3oNUlfy3agPKe2jWFIiK/TlV2qyzytm1FMq5yBxDg/f/r:PW5rEtkKDUmUla3agCJWF7K/hEsmv5yA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044342ab1e662951dc8c2da159cd1b1a_JaffaCakes118

Files

044342ab1e662951dc8c2da159cd1b1a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 507B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 72B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ