3eea08b76dd8b37b43d86a0d10a682f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eea08b76dd8b37b43d86a0d10a682f4_JaffaCakes118
Size

191KB
MD5

3eea08b76dd8b37b43d86a0d10a682f4
SHA1

e4c44554b2b2474cdb12314d1292b501fe8a2976
SHA256

0ac3304c82ce3b89ff03b6879058a76eec05855548a6515cb52d6a5df5f586c1
SHA512

f039e9a8524f5e48b165882162abd57bf6a1bb8334aa0c656aa69d03ec3f0e8b00f091b0a21e8fcf2d3e5db4e313ea78eec134480ba3616ba7951037cfffc5e0
SSDEEP

3072:A4jeFG5589UCHN3UPiibq0NREpRg1K3nT46XvMfG139dFB3BaRDo6WjGG:zjn58bHNUPiibq0NREpRg1ITrMfGP50t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eea08b76dd8b37b43d86a0d10a682f4_JaffaCakes118

Files

3eea08b76dd8b37b43d86a0d10a682f4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 37B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ