0aaf9a13f941ee3834c9a6a220c5b4f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aaf9a13f941ee3834c9a6a220c5b4f9_JaffaCakes118
Size

23KB
MD5

0aaf9a13f941ee3834c9a6a220c5b4f9
SHA1

4740a2ffeb86a7a09a9984c1f2682d2d28c78979
SHA256

b8d484a9cc9e8102dc1095645dca23207fac78c3552ea7dc5c7c633d81d2dc87
SHA512

c25bb73d87b557645940527838fa748bd4c1d48aa34f79a7bdb9bcac2577295c6f303ed5de722b8fe0c6166b389653d5f27d21736a6a5fcbe5fc74b7cc9034e2
SSDEEP

384:UHualRW5ahKXqGHAJMHif3/3f4NfeyqiLdsCroRerArEwsY+UEt:UHuSo5ahcqGgJMG34NfePCseMowsYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aaf9a13f941ee3834c9a6a220c5b4f9_JaffaCakes118

Files

0aaf9a13f941ee3834c9a6a220c5b4f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ