3a56d614b2eee4b5700b8011aa891d12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a56d614b2eee4b5700b8011aa891d12_JaffaCakes118
Size

2KB
MD5

3a56d614b2eee4b5700b8011aa891d12
SHA1

ab33975e63104744aee6815940085414bb721edf
SHA256

b61a286f111ee1a58ae80c19fb60333f93e41649af690436d547b386cf4ce16b
SHA512

f6ff7f90d7213f410fbcc1fb732a6c6b3e6b16534610dd78c231eef3fcf13e2556063610c2550625ad9e3478111a9434444d8d551e5babb685f21b669f3dc7d2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a56d614b2eee4b5700b8011aa891d12_JaffaCakes118

Files

3a56d614b2eee4b5700b8011aa891d12_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ