0859424aaf602f942551a0e61612a829_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0859424aaf602f942551a0e61612a829_JaffaCakes118
Size

1.2MB
MD5

0859424aaf602f942551a0e61612a829
SHA1

d221f1b45c6fd5118e3f436f2c6c70f4c101f208
SHA256

13a904ab2e32a40c72763c08a52031002e72643ab71ada86e7d06eb6692eafb8
SHA512

3c18f503b5a6f8e610667638a8a1f97d0b1c1e97f8d2d4aca77fc4ac0cc41aacb895ea24508d135e7b97992e7dfa83fe51328f5f6427996456b11ddcee2c2110
SSDEEP

6144:1S4wb+1qXjznSOl2y7YyMGMMj2PTQEo7ucyHW:cx+1qXjNo3V7Qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0859424aaf602f942551a0e61612a829_JaffaCakes118

Files

0859424aaf602f942551a0e61612a829_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ