15f5e40199a8890927993d5a410c7f67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f5e40199a8890927993d5a410c7f67_JaffaCakes118
Size

521KB
MD5

15f5e40199a8890927993d5a410c7f67
SHA1

65fb2999b32a47b7f85f06418be2532231536cca
SHA256

cc8666a5fe1cc56fb40db710987f65db0109bb227e33baa60d13a1346e064030
SHA512

e463c4c0df73f7c36976046ba7939c6040b3283f6a732d036980ed59383d72cbfc80bce4fc0092732e43e162c270334e16b74a78fb8801f22014151e87903db9
SSDEEP

768:bBn1rCTyGj65q9Ybb0tH24k/evvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv2:bdpjGW5q9YbbYZk/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f5e40199a8890927993d5a410c7f67_JaffaCakes118

Files

15f5e40199a8890927993d5a410c7f67_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ