eba4d02e4cb7b906f1facafdfcbd5060_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eba4d02e4cb7b906f1facafdfcbd5060_JaffaCakes118
Size

226KB
MD5

eba4d02e4cb7b906f1facafdfcbd5060
SHA1

eae19874a720298dda9540bb67e67e4a82726d01
SHA256

fcd76d66173711f5db236cf6551b6016527a9f1d936a6e4793131c9489b78f7f
SHA512

0a0c284932af52618f171a46d4c901cd199ad2801eec925b57faa8d76ac351e453b793005cc08d14e35e40731a2248a007834a85d457c0e4ff8cc7ba4a7826de
SSDEEP

6144:W34I67upQoYy1lfLP1m8G/4O5j7YkcfrB4:e4IHQoYyfzMxy94

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba4d02e4cb7b906f1facafdfcbd5060_JaffaCakes118

Files

eba4d02e4cb7b906f1facafdfcbd5060_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ