049171b7e608eeea0eb3ebd86e75e147_JaffaCakes118 | Triage

Sharing

General

Target

049171b7e608eeea0eb3ebd86e75e147_JaffaCakes118
Size

777KB
MD5

049171b7e608eeea0eb3ebd86e75e147
SHA1

b5af0722db4ae284717605dcaeb5f5a8a52347c4
SHA256

53b82130af42bd473daeed02296bdfff47f5bf78712f3f9f515b2b41791af259
SHA512

09b9b0deeec7def99fd523a683250d31574aeb6c31151b982b7abcb85a488025e1820931c55abd060188abb191a89f49fed92184eaa34c3e58da7a14aba7fb62
SSDEEP

12288:C92dy3kOPF7ESY0S/311zvsjh6t7KTaV7HgcwptB01rGDm3yzAy26jLY:L43rF7ES+3DvaQkeZjwptB01rGDKTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049171b7e608eeea0eb3ebd86e75e147_JaffaCakes118

Files

049171b7e608eeea0eb3ebd86e75e147_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 615KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ