0e54803898e7fa223d36497dc7c18179_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e54803898e7fa223d36497dc7c18179_JaffaCakes118
Size

152KB
MD5

0e54803898e7fa223d36497dc7c18179
SHA1

b7c4000a39f48725660d9cc9a5f00ba0ba7a30cf
SHA256

a06f78a0fc242042cc0bc9937cb578018503eba728227ae338e4963e1fcdb853
SHA512

7cd09cede7837c27ac36d1afcb692b1d70c698edc08e07377db46dde4b7e75d3d7fc53aacf5a281fecad0efceb606edb79fd2494c2afb4054333c12009c9e2ce
SSDEEP

3072:agJeMJdv/cc4nDbfagCqKZk5yY/fkiu4bfosW0RKQAVJ0JnK+xkS:1e2dnF4nDWgRAkPOifosH+VyByS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e54803898e7fa223d36497dc7c18179_JaffaCakes118

Files

0e54803898e7fa223d36497dc7c18179_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 295B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 72B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ