0816d75a76869cd60f1e06cf95873cd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0816d75a76869cd60f1e06cf95873cd6_JaffaCakes118
Size

1.6MB
MD5

0816d75a76869cd60f1e06cf95873cd6
SHA1

03d374fed4168ec2d0524e0117d03566e5271068
SHA256

b447605052912a50aac61831c03793274b2bb22f975d9bca5c5a578d1f10d907
SHA512

5fd4069f0610a6db80cbe24eb081000e55f683a18fdffdf9fac9ea5397846ada1b48945fe73ba57716203ed6093cf2feacd1fde4aaae1b3bdd834bf40e208f63
SSDEEP

24576:GRiRTOcRRJUjAVT5zbdfJJpJ2JbJDJJX+lJJT1c4JJJ4JG8JJVJJJJJZJJJJxfJV:GRuTdJnVTt9NnW2eef/UWBX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0816d75a76869cd60f1e06cf95873cd6_JaffaCakes118

Files

0816d75a76869cd60f1e06cf95873cd6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Drawing.pdb

Sections

.extrel
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 492KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbgmap
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.il
Size: 540KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ