fccf0b5917815ab7e0dc1a7cd2e36104_JaffaCakes118 | Triage

Sharing

General

Target

fccf0b5917815ab7e0dc1a7cd2e36104_JaffaCakes118
Size

24KB
MD5

fccf0b5917815ab7e0dc1a7cd2e36104
SHA1

69713922467f66d80260729f59621fa0afcc9831
SHA256

2d02dc5a8a4b76c90eb27b1aef18c46e1ff759821436282f7e846beabcdf7152
SHA512

7b8457d33831e44894e697a14031cfaa6c51e49be751547b11654ead5d7c034a61dbf45ae0161334981fa16a0cfed26dc4258d259176537d1703f1977a226eb4
SSDEEP

384:paUxz0C+Mgqd+1pqBQe+VItZFfVwid1LEXQVTEUtOg1ShuYcAzONr:MRC+lqdSwBQhWDzwid1LZaUVMEmw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fccf0b5917815ab7e0dc1a7cd2e36104_JaffaCakes118

Files

fccf0b5917815ab7e0dc1a7cd2e36104_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

start

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ