123b12536c19cb02080b906cde1682e2_JaffaCakes118 | Triage

Sharing

General

Target

123b12536c19cb02080b906cde1682e2_JaffaCakes118
Size

158KB
MD5

123b12536c19cb02080b906cde1682e2
SHA1

cde2aea04791d05249d4302d04ede7e32990b3a8
SHA256

b7b5800cd3d54db08a81d31da0ee21c75247c8ffb6646d42ab73be3c2c98b503
SHA512

5d66e86ec9cbd8ea1dc3d32d3f518f1783aeec22ce38421fab9ae063e1c837da118661888296b2f16ec9277ea76cee2568f6e705dbe04da13ef900f5815d4496
SSDEEP

3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVB:F4r/iEIznun5gsdW7NVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
123b12536c19cb02080b906cde1682e2_JaffaCakes118

Files

123b12536c19cb02080b906cde1682e2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE