2895b537163c1fb7510ecc0b051cfa50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2895b537163c1fb7510ecc0b051cfa50_JaffaCakes118
Size

521KB
MD5

2895b537163c1fb7510ecc0b051cfa50
SHA1

57f83297f3527a2aea97a3937985cb4f0bfe3111
SHA256

1d95b1210ae32d12f12e9995258439c14e55593289c6942122c23f9506c432a6
SHA512

6df4a74d8cb1b7e1fceb909a173a175017b5d85963b5f5d1b79359e9367c1e297857c4612016ac9f909ad2669489f486bee9e76272e29a543a47726c22f3b0fb
SSDEEP

768:jQr24Oyw3yMFTtxLNtb2hkljjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjo:jwezV8kC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2895b537163c1fb7510ecc0b051cfa50_JaffaCakes118

Files

2895b537163c1fb7510ecc0b051cfa50_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ