43ed03592070f18bb028fa1f12a6f2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ed03592070f18bb028fa1f12a6f2eb_JaffaCakes118
Size

86KB
MD5

43ed03592070f18bb028fa1f12a6f2eb
SHA1

4ef27848c8c86815f4a00da175c4c0fe15801856
SHA256

19dbe8b0bd0a6bb332b02f075faba5bcdedced8728d0dd7b66636ea1dc0551bc
SHA512

ad72576f4f70c95561d9c2f57a3bcce523271596863f6da8b6b0d23b05be03d29a9a6cd7a0f53b66bf8b7ab9052815b80163af99bce55f808bac5b9abc9854e3
SSDEEP

1536:vbY77LntQh0JO9qx6WId5528/0e4hd1BclADlCkWbxELnnWtUWML4vD:k/LntQ/c6pX28cNhLClA5KEnnPWai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ed03592070f18bb028fa1f12a6f2eb_JaffaCakes118

Files

43ed03592070f18bb028fa1f12a6f2eb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 19KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE