13dac3692d6836c56ee042fff226fa43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13dac3692d6836c56ee042fff226fa43_JaffaCakes118
Size

473KB
MD5

13dac3692d6836c56ee042fff226fa43
SHA1

6811638b1d7656a0beda1e84665e847fc498bfdb
SHA256

746bcf5f081a02e1466c012ed6604c08e9c19b5bdd6685d68e77edddd21a630c
SHA512

ff36ba179e5109e942aae05c979ecdd31718a7d50484cd25bade01ac6d19799c613799169be05d19e93e9e19e6a910848a9454add82096750c5282ef12e16fc2
SSDEEP

12288:fo8V+YHuHnN5IB0WmnTX8CQhX07FLCOhlIhxQ/ZpG:fo8V+GOY0WmnD8jZkIx+Zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13dac3692d6836c56ee042fff226fa43_JaffaCakes118

Files

13dac3692d6836c56ee042fff226fa43_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ