279c89000f6b1e85dc54cb031bd50257_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

279c89000f6b1e85dc54cb031bd50257_JaffaCakes118
Size

157KB
MD5

279c89000f6b1e85dc54cb031bd50257
SHA1

a028106a5e067852c4b4ead38ecb4a34591c6618
SHA256

b9e0fd487ba5e98afce592bd3a68a79e09ea89fdad1bd778e26809587845b20b
SHA512

38e08c63c6fe2386804d456d3a53c81e841c6099d70e3a522e6d79d75ba93aa9ed4df84c6a05205f4488d48acbb494ea25828564889d1aec802893af1c2481af
SSDEEP

3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVR:F4r/iEIznun5gsdW7NVR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279c89000f6b1e85dc54cb031bd50257_JaffaCakes118

Files

279c89000f6b1e85dc54cb031bd50257_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE