3d52d01985a8f49a4d69edec0614ed8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d52d01985a8f49a4d69edec0614ed8e_JaffaCakes118
Size

63KB
MD5

3d52d01985a8f49a4d69edec0614ed8e
SHA1

1c1f66f046f76583e84c51f8e67eb9abd1326843
SHA256

ba85e25695351119f01c70daeb5c35ea0877aeb069bf240d3932228a26fe6ab1
SHA512

4646ad5f06b08c692a3440ad04126c030ec17131393985177699a3ddaabc3ad8ffd8532186e26336966e91606c170f56237034ee0eae48a353b18bca436d480f
SSDEEP

1536:lNqVe0dfQBL9sjZrSdKWMkpY+lvBhBvRugZ8JCr1JN5YR5:LqoOQQjZ/WM09hlR9Ck1JjYR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d52d01985a8f49a4d69edec0614ed8e_JaffaCakes118

Files

3d52d01985a8f49a4d69edec0614ed8e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE