05d28607b3344c3aa1d779736f0ccbe7_JaffaCakes118 | Triage

Sharing

General

Target

05d28607b3344c3aa1d779736f0ccbe7_JaffaCakes118
Size

17KB
MD5

05d28607b3344c3aa1d779736f0ccbe7
SHA1

4a0351b7d2fa714f44d67a2b342e241cbf8fe5f2
SHA256

3edee20763bf9d8261c8c3db7fa5fa7f59dcc0278e6383af7b758b5e60b38ffb
SHA512

f7bbfaefb821b99f86a3a36e3c22f906352e04c309405abc6e1f916dbe0957f1d6917dc97c500dad4173a231a95431b928abe59835589f1f5ec9deffa57218e5
SSDEEP

192:n369sd9OinMOZ/vvtaUuU8e0W9+ym+yCrDYmBMitDeiHKoYDKtXLerFRoYN37nHk:362rOiVFcUyW/Bv8oU97E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d28607b3344c3aa1d779736f0ccbe7_JaffaCakes118

Files

05d28607b3344c3aa1d779736f0ccbe7_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DiagRegister
Dummy
GetIHighProp
GetOHighProp

Sections

CODE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 81B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ