0deaf23b1e6a4b41395b4104d8edeca3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0deaf23b1e6a4b41395b4104d8edeca3_JaffaCakes118
Size

733KB
MD5

0deaf23b1e6a4b41395b4104d8edeca3
SHA1

dc8c8f8615bf916c084b5c241c73c6b61f1d482c
SHA256

244f90bbd477909b54c1a666c3d89fec31994b27e3209c309a83a9c960cae05e
SHA512

3f16f1e3488255da39b49f4a96c2d618f22cd90ae8121854e4d6d4861e03917fa1412169bd3faceaa091f6b1a3a6f1cf4713167db7dc4a8bc6a234d19b45611d
SSDEEP

12288:hlsXynwHDn9T2abNArlxDalZ2jjfTP1SGeYCU:rsXynEDn9TrbNArD2lZ2jjfxBew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0deaf23b1e6a4b41395b4104d8edeca3_JaffaCakes118

Files

0deaf23b1e6a4b41395b4104d8edeca3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE