JaffaCakes118_b2f6d1c1b873f80a9737d98aaf77a9d4 | Triage

Sharing

General

Target

JaffaCakes118_b2f6d1c1b873f80a9737d98aaf77a9d4
Size

679KB
MD5

b2f6d1c1b873f80a9737d98aaf77a9d4
SHA1

d6e6f6fee812acb67a2fbc079ebf295dcbe75459
SHA256

d6aa93159c62fbaaa8e99ce3344a3713830e08fc6d504425f7d1e86291fdbaa0
SHA512

0821f8e384c2c6bec1326714e8682dd932184cdcae2d94b32c7fae7fb2ade2cc4de4c437117150be8a96acbaf9ac1ecf4171e08625e38eb73bc98d3610ce5d78
SSDEEP

12288:n87qibJ4hW5A1/i6daSXucxA+hcgDm9TP5hd3vr6m2K:8Gs4hW5A1/ra3tCcgDmDvr1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b2f6d1c1b873f80a9737d98aaf77a9d4

Files

JaffaCakes118_b2f6d1c1b873f80a9737d98aaf77a9d4
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 531KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ