0d35f2a60ed4ac4b1362c2dd34789d06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d35f2a60ed4ac4b1362c2dd34789d06_JaffaCakes118
Size

308KB
MD5

0d35f2a60ed4ac4b1362c2dd34789d06
SHA1

9220a9f0649fdeb6153590c79328a41035478f8d
SHA256

023c972269fdad2f621d35e83859d29a7a32c87ce82a4c987a2b6c8f74432e72
SHA512

61b37ac09c6851fba863283655dccaa94cd346f1c84c6247d402440a49034ce1b0547d8c8b60458192a0d2838684fdf367b059928996320a23e3c1cc184245c5
SSDEEP

6144:oKjzkUIqJqFm8/WbMV0KQ9p6OSy0n6YKBBiMP+ga0MGOU1NCXQzs:/fkhTMlM2Kip0y06HBr+gnbtNfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d35f2a60ed4ac4b1362c2dd34789d06_JaffaCakes118

Files

0d35f2a60ed4ac4b1362c2dd34789d06_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 295KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE