2582682f59e213f71f4f49d69391ab53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2582682f59e213f71f4f49d69391ab53_JaffaCakes118
Size

496KB
MD5

2582682f59e213f71f4f49d69391ab53
SHA1

22d9464fadc6fb37220478b428b861275c1c8410
SHA256

4ba97e8ee57affbe87336718e8704c38244e006e4c74bb09f750ed4c391e5083
SHA512

692c507bf9dbab3a4aa4aa5fe8813f56e675a492713dc5224f186cb4019fdc427d76c66a2bdb76d50f966fc356e8c82d389ff45d9996941d1fab352db7aa13e0
SSDEEP

6144:jBoK7y8/jw1TANaRM3p12Sx+Tg8R7k6TytfVoc45rZcHBOhJnpbQFg/eTnBBCIhm:Fj7rjw5AG315ytAZAGbQFlTOIMyHy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2582682f59e213f71f4f49d69391ab53_JaffaCakes118

Files

2582682f59e213f71f4f49d69391ab53_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ