f1515fe4c5dd19281b4f2be4b18381ae_JaffaCakes118 | Triage

Sharing

General

Target

f1515fe4c5dd19281b4f2be4b18381ae_JaffaCakes118
Size

35KB
MD5

f1515fe4c5dd19281b4f2be4b18381ae
SHA1

6b2888dbfc7f4f5f9847491ff040815e0fb4c923
SHA256

9a8d2f05e720318230612c8da49a21490e8c783e7538da4fa204ed60096cdc94
SHA512

83f03f9e88ba09b4f8f12929220a508c9edfde80740901062e2a5469e1ace10fe3461d663113a7605edba7a034fd9a3ce0417c4c396c127d3428ff96f58cc572
SSDEEP

768:bbju9FqpVszaT7Q4POPonmACieqbTo3Oyuh2uRRvHP:CXqpVsmWymACzqTSVuhVPvv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1515fe4c5dd19281b4f2be4b18381ae_JaffaCakes118

Files

f1515fe4c5dd19281b4f2be4b18381ae_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

hhh
wmhkof

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ