0be27656b5a4259a2e1287f69da2839b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0be27656b5a4259a2e1287f69da2839b_JaffaCakes118
Size

314KB
MD5

0be27656b5a4259a2e1287f69da2839b
SHA1

8cac7a1840f310294191d31e74448eabd3dcfb0c
SHA256

f334ace0fbde43d3cb59f289df1846142d804a5a3a6b7cd6aafa50bd3d6952fe
SHA512

a4516ae3285677140015f5548efee46b589b17569d3e1975724a0370234a3c42f3512682058ba045a43a4727be00afc84f9e062f2d5d1d1dd752f7c0f76675d9
SSDEEP

6144:AGGSnH+QhxKheiRZIGEmNlNH/a25jv0PVyxyEqRzYzjBU2fr7Xn3X:AGDHZqhl2mnFR5j/3YzWBUEn3X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0be27656b5a4259a2e1287f69da2839b_JaffaCakes118

Files

0be27656b5a4259a2e1287f69da2839b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 140KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE