108de1877152f1d1c254d73ea72508e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

108de1877152f1d1c254d73ea72508e0_JaffaCakes118
Size

182KB
MD5

108de1877152f1d1c254d73ea72508e0
SHA1

d79ee8828c8b019b89fc10e7f29c890de3a29e7e
SHA256

33b2aca9e45f496adad04a9038498a648b1b1bab2c8b0ddbbe271c4d1941c46a
SHA512

4f94b8a932436ccddfb77dc3630bc653348b513cc3eff3534005824dc9fe1b6755dced26158a2734f95aca168d0e9e46597071bdc3e74f17329ebce05ed2ad5e
SSDEEP

3072:SHuqamVZ5hGHt/G7RrgzhDYlTJDksPnhkAu21/TUmUgyrJnfsM5:camVZHGHJGdrgzhDYZdksPhkAX/zUtr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108de1877152f1d1c254d73ea72508e0_JaffaCakes118

Files

108de1877152f1d1c254d73ea72508e0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ