ec829bc07a2e434b4a9e3efb959c2731_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec829bc07a2e434b4a9e3efb959c2731_JaffaCakes118
Size

57KB
MD5

ec829bc07a2e434b4a9e3efb959c2731
SHA1

a52ffa14be01af7d6db51b2c5d1441783df7f203
SHA256

9394def26305270f7f7abc6090f9117300cab3efab5d5ce5c1932f77dc27fa61
SHA512

b2cbfa063cf6996595f4f3d98b7af214a89059efa3599902cf03b3ac883b9426db1dd0f9e6751937bd353621231c92dbd75e073356b8970fa58d616bcafe011a
SSDEEP

1536:Zgx7d/5HRq2ADnm2U9rnjLcoYRLTi0Cgc5C6:Zg9B54r1UtIdRLTiDgc5C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec829bc07a2e434b4a9e3efb959c2731_JaffaCakes118

Files

ec829bc07a2e434b4a9e3efb959c2731_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ebfa8512716e04c2476986f9c4055e40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

__lc_handle
__p__winver
__lc_handle
__threadhandle

Sections

.text
Size: 45KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE