3913bc6bb97200632e43e5acdfb6c81b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3913bc6bb97200632e43e5acdfb6c81b_JaffaCakes118
Size

304KB
MD5

3913bc6bb97200632e43e5acdfb6c81b
SHA1

653e45a3151cabeecc5420b65485db6db83386fe
SHA256

a8ee75d52e4b36bee7c655a2a4de907073d7c877d8f5df4eca8b54dab836976f
SHA512

e600b9306274932f4d73f5226a20b66d09a35d690651ab80cd4c535b95ffe6f22e46832e90b6f3f637c4a01551f6cb542d867b95906834ecd9d6eeab233a43b1
SSDEEP

6144:1Datv0EFv/KFWSCJRvaR5Xj/A66Yvn8ous+Bc9usZaxqSSPVz/4:Utv0EYFWSCJZu51oBcvZH4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3913bc6bb97200632e43e5acdfb6c81b_JaffaCakes118

Files

3913bc6bb97200632e43e5acdfb6c81b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ