072319a904d6fac39fb5da1b89bfc384_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

072319a904d6fac39fb5da1b89bfc384_JaffaCakes118
Size

128KB
MD5

072319a904d6fac39fb5da1b89bfc384
SHA1

13adcaa03c39c0a35baf9ca47bf2e2b2eea6d54f
SHA256

b3b15c153d97bd7e5bfaa40ed6385b9943160d6a4bab2775086b97fda1f385e8
SHA512

f8b523550564290464964c2f7e7663ebefa24032224295729b6456147a68f160754c06908c2e95baded7af385dc9d2f15c1f966a4b8efa3540386110abdf8ce0
SSDEEP

3072:vcAyImIAx4ozZiiWqnF2qO43xKA9kKvbOHD3w0Hzjn/u:kAnqbnqJjn/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072319a904d6fac39fb5da1b89bfc384_JaffaCakes118

Files

072319a904d6fac39fb5da1b89bfc384_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ