560ffd6524acf27c41a2404c31621e04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

560ffd6524acf27c41a2404c31621e04_JaffaCakes118
Size

988KB
MD5

560ffd6524acf27c41a2404c31621e04
SHA1

ccd4b6709d34e7771dedb59c0e92a8e63dc90780
SHA256

ab34741e53e019472a620eb57ef6026f935e2b5061b8cf731670d3ce243d5613
SHA512

c672bc8aff46d5e8991409c507be53abc1dc440bc546bfe583c442428e3dfa876bf21f2ce8089eb05163ebe9b97238a00d7a14d02fd8e9015a98d215417fa29f
SSDEEP

24576:66M/62R0gGhSD7CJ8R3mg0j4hmzKYg+tep:66M/6EVDvdL64hmz0Ke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560ffd6524acf27c41a2404c31621e04_JaffaCakes118

Files

560ffd6524acf27c41a2404c31621e04_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Auirtw3

Sections

.textbss
Size: - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 980KB - Virtual size: 984KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 425B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ