e979f51e0756046aa43d051ebc9a9c69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e979f51e0756046aa43d051ebc9a9c69_JaffaCakes118
Size

171KB
MD5

e979f51e0756046aa43d051ebc9a9c69
SHA1

a165fd8eafa64885c0ebb9bd26d2ed3801bad6e6
SHA256

45e00d4044c1c1f4a6d2720572eae4b523faf1081fe41d4df660787d61db5a56
SHA512

6c7d837ce17997e308a0e590a1a6b0b98d09a277eff7a52283095781b5c0595bca18a5ad80bbc4a84edb36b03176eadded74ab122d8cdd735f3904f21dd1393f
SSDEEP

3072:0Srhw9w/d+EpfLAFOkQpSAUH0ySbzmZrXY96v1wgFTNLP3kLSBJH0rhTBfwwTni:0ehXB7kQfMvNQLbrhTBY8iX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e979f51e0756046aa43d051ebc9a9c69_JaffaCakes118

Files

e979f51e0756046aa43d051ebc9a9c69_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ