05639ba9d96733541826b2cb922aa995_JaffaCakes118 | Triage

Sharing

General

Target

05639ba9d96733541826b2cb922aa995_JaffaCakes118
Size

24KB
MD5

05639ba9d96733541826b2cb922aa995
SHA1

3b25d0c075c87859115907a63bc0fab10a4c4f47
SHA256

529620aeb2ebf4ebb58502d8fe83ecdd97186b1e8b9a29508ad26756541a1150
SHA512

1afaa124ef3a12677023752b3f421d00bd40ffc4298d1e713b7c2668c5ef1b42f15b647599aa6b0001c59bc28dcfa68b00bc6521b0675d5ac341d42ca8456f0c
SSDEEP

384:DaUxz0C+Mgqd+1pqBQe+VItZFfVwid1LEXQL/Z0YaqTx+Yd1eAznNG:2RC+lqdSwBQhWDzwid1LZTZ0Y37N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05639ba9d96733541826b2cb922aa995_JaffaCakes118

Files

05639ba9d96733541826b2cb922aa995_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

start

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ