0de1c0e5f1909c4f599770b832a1059a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0de1c0e5f1909c4f599770b832a1059a_JaffaCakes118
Size

49KB
MD5

0de1c0e5f1909c4f599770b832a1059a
SHA1

305295c283e00764bc718087ef409fbfbdbf1c47
SHA256

23eed9218542cc8cb91b992cfcb801150381acac56f77f72eeae49e0bd956050
SHA512

12dbb2b00c4b2791700c03d39c65275bc9702ef97183afb347b66fd9c9df936468c14cdedf5d3192116ba9e1aebb088f60028ae89a306cf83662f9cb9cfb1524
SSDEEP

768:KQxMsr6fJ1cnU85ct0zj/QP33cCz9TZF9LV48FYaEg9ifqX95XQ:7drK1EVjOcQ9V/L5X8fqX99Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0de1c0e5f1909c4f599770b832a1059a_JaffaCakes118

Files

0de1c0e5f1909c4f599770b832a1059a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.pcode
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 10KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE