436e9717021dac6261f9e4cdec388b31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436e9717021dac6261f9e4cdec388b31_JaffaCakes118
Size

47KB
MD5

436e9717021dac6261f9e4cdec388b31
SHA1

8accf3975331606f173ea120beefa4f55b7c5977
SHA256

05cd24b48680d54968bbcfdbbbe43893a95b59c4ae5de4eb07c5f891561b4001
SHA512

3aaa39a2cd707f9bbcd67b2371662854fc6642b62f2227ee8ef47fe0f3b40a2d84f26db6808f74ef6a1964c398dfcd51563130e23a49874805e00175cce22c82
SSDEEP

768:impM8peLohboGvEHATCjMAWGuH8WtFGtCHNonNVYcKHIYexuOkCMqr:iaHoHuCj/WpwtQNoNacAexuji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436e9717021dac6261f9e4cdec388b31_JaffaCakes118

Files

436e9717021dac6261f9e4cdec388b31_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ