56c6e75d3c861c12001119797386c56c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56c6e75d3c861c12001119797386c56c_JaffaCakes118
Size

85KB
MD5

56c6e75d3c861c12001119797386c56c
SHA1

7d19f8ced191467c39fc7fd895d032d9b5f18e06
SHA256

eab7acd524f654c35a8ce8f485dac3f4c964bf0eb45e66ead8646af1a81ef353
SHA512

ecd0e8f6ef5287791737b02ce45779f387ca423915670bee9023671865328cfd698d9c552bd209d31fa8d594aa9a328899eb3f158df6a9ce3da6132d5e391a08
SSDEEP

1536:ANgpLtQpcgPqf0jqamg8D81H0eD1VT4xri4Nz0sHS8CSRA+vr:ANOuF80jg8TOi6JtCEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56c6e75d3c861c12001119797386c56c_JaffaCakes118

Files

56c6e75d3c861c12001119797386c56c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE