371ed1ae86af3f5882f66dfd368ed7eb_JaffaCakes118 | Triage

Sharing

General

Target

371ed1ae86af3f5882f66dfd368ed7eb_JaffaCakes118
Size

121KB
MD5

371ed1ae86af3f5882f66dfd368ed7eb
SHA1

176dd93cbd1953ff3aa7d3ae151a97b73ed63ead
SHA256

c9cba94a679e9e1ea84585c70c8ebe8e586baa9f34801d104ac4159a45b00519
SHA512

f7c93af60e54b3dd489255921a745c63d954eb2406219d027e45d1bcfdf9c4f75997fd0a30a66202e0706a135608cd8dd68bf30014cedf30f739a443c4d7a771
SSDEEP

1536:NfOGWmRWbLxRSnn4LzUZUSX3Hy5H8f8Wn3doTdcb2XMEVwqLuzT5poM0Gp2peOry:BeUxgHEn3ocqXMEVwqWxmeFRUSJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371ed1ae86af3f5882f66dfd368ed7eb_JaffaCakes118

Files

371ed1ae86af3f5882f66dfd368ed7eb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ