6cfe20c8a866587ff48ae84cd82e078e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cfe20c8a866587ff48ae84cd82e078e_JaffaCakes118
Size

32KB
MD5

6cfe20c8a866587ff48ae84cd82e078e
SHA1

972bf7154bd0e4d73af099a0cb7b6f353e1e8938
SHA256

a9b24a80ad5455344dc5dcb51495eccb117904d10ab51ee09f5ffaf549d49506
SHA512

c13f0b3bb85ef85b1d0b94cd652fb3a7f1081fbfad21b759c07ecdad565f0432b459ce75d32cf6d215f8f3d82a78746819eb7d49676feeacbbac06d809fe482e
SSDEEP

384:1h8BgWhyWF+gKr6paA6iy/qRR0pD7MZuZ/tWSUbW:v8mCn3miyCRaiuZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cfe20c8a866587ff48ae84cd82e078e_JaffaCakes118

Files

6cfe20c8a866587ff48ae84cd82e078e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ajik

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ