0573159c623328e49ff260718c3466f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0573159c623328e49ff260718c3466f0_JaffaCakes118
Size

236KB
MD5

0573159c623328e49ff260718c3466f0
SHA1

115cce57894b7e3ea97dec68327e065fd5ffdd8b
SHA256

d8346752e060580f47e4d4dc365a078302454ab45dabd9c97486e6f178c24772
SHA512

0c81082b3fe848b7088c1863d98891c50ef296568bfaf06bde1d7741b467dcb426c8866d268b37d2a9e80aa6a103dad61651203c175d1513d657011721e47c3f
SSDEEP

3072:XDnXBanM1NFNFWdeV9bNjct2OK3pg9idNUT5EJ+e+05yRh0vQ6YEavFzoi75ESTh:TnxsIN5WoVpq70dNUT5EJ/zyRJ7C+jN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0573159c623328e49ff260718c3466f0_JaffaCakes118

Files

0573159c623328e49ff260718c3466f0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ