3057edd6f88ac52c2f8aac3bc12dfcc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3057edd6f88ac52c2f8aac3bc12dfcc3_JaffaCakes118
Size

308KB
MD5

3057edd6f88ac52c2f8aac3bc12dfcc3
SHA1

f4ec13897b58127d2226dc9f91ad6395b6985708
SHA256

293ae5dc99a07e24241995311b7016c65ac6658840ae20635fe49c43dc875b9c
SHA512

549486c43b03b9c6b96b3f118909639dd9c4ba201adb8a9d2d4ebdfe538eca4d33d0822469ca1170460461ab3ef695153071604a730ac8a6d6c61de6169f1a6e
SSDEEP

6144:oKjzkUIqJqFm8/WbMV0KQ9p6OSy0n6YKBBiMP+ga0MGOU1NCXQzU:/fkhTMlM2Kip0y06HBr+gnbtNfU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3057edd6f88ac52c2f8aac3bc12dfcc3_JaffaCakes118

Files

3057edd6f88ac52c2f8aac3bc12dfcc3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 295KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE