05a002a80f16d862e513d053c1848f1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05a002a80f16d862e513d053c1848f1c_JaffaCakes118
Size

15KB
MD5

05a002a80f16d862e513d053c1848f1c
SHA1

fe9ccdc0f835856f8d4614e0b77bf5de16aee270
SHA256

e65df2e91c508ccfdc2ab7b7b65462f683d7643dd5731249cd148a1e41d56ffd
SHA512

2f9498f8ea0153919d6fd96ed41a5866e888c03ee5632a05fc3444c78a839d2cc8a8be872031a72f1bab5f668778fd30abb7e7c831a15fd0121b0c2f97ee505e
SSDEEP

384:J96ztq1HjvyERRwRjXcVrcZcPifjhrz1SiYYOLG:JkWDvrwRZiPiL51SMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05a002a80f16d862e513d053c1848f1c_JaffaCakes118

Files

05a002a80f16d862e513d053c1848f1c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ