153492c5998ffe67058958df519061db_JaffaCakes118 | Triage

Sharing

General

Target

153492c5998ffe67058958df519061db_JaffaCakes118
Size

1021KB
MD5

153492c5998ffe67058958df519061db
SHA1

1af81a504d6398510c5d4de53028668a225c5202
SHA256

98ee9cc7f324639721ed3b6c3129d27419a9b7fac4a2e608f7cd5bddedeb254c
SHA512

43326440985d20731c643f739c74772b0b148319a583957b13452c16461d18c723858a119fe0720c56e262d7abedf2124b0e77ee57a327135d4092987d49675a
SSDEEP

24576:sKh2uz4GzOlWWVndfkWHEoMfbRTBs9RdKAMNj1gJOnwvSqkbYYTWLD:pguztWWORKfb0RdA4OoSqfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Reload.dll

Files

153492c5998ffe67058958df519061db_JaffaCakes118
.rar
Reload.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 712KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ