f6aa053f5819bcc39f3433efdb3d10f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6aa053f5819bcc39f3433efdb3d10f9_JaffaCakes118
Size

89KB
MD5

f6aa053f5819bcc39f3433efdb3d10f9
SHA1

3f5b03e184b4362f6610fa0572ceb466d659e490
SHA256

c1518516efd98a64c904b2748ecd6143a0df27eee40c0ef064cbce6fa6ed9920
SHA512

9b70c1e3ffc6507bf0270b8d64b61e242add1f0672b4d6a1734f527408f8f712a58f89d2a2c615eff16a1733b9fe3465a59d86738ba09903d947bd99345d0234
SSDEEP

1536:Onqc+QjoPyYAPEmOC5TrZrggOh9h11r1xfpADMOjPyPTQWby:rioa7fpZkhvhRxfpA1jgT1by

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6aa053f5819bcc39f3433efdb3d10f9_JaffaCakes118

Files

f6aa053f5819bcc39f3433efdb3d10f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Start_H
Stop_H

Sections

CODE
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ