29a8c09a4dc9c0194d1313bd7ce809cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29a8c09a4dc9c0194d1313bd7ce809cd_JaffaCakes118
Size

226KB
MD5

29a8c09a4dc9c0194d1313bd7ce809cd
SHA1

1f0e7734db0ae964b53d1c4f298c3b8423ad0650
SHA256

bdac9c02bde52ea6130454d3c1634dcf7b2ed3d68b444757ab0e1b8e51693d04
SHA512

d0f87296a6c81197277a96679b2b7b3806296897ea53ad07e584817428b9df23faca1cc6340ff4d299011d512e1a05122a1979c73ae8162668e6c13759b99cef
SSDEEP

3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVtWZdncjlqDDHgXJYVXmpw:F4r/iEIznun5gsdW7NVtWDcqkYVXm2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a8c09a4dc9c0194d1313bd7ce809cd_JaffaCakes118

Files

29a8c09a4dc9c0194d1313bd7ce809cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE