071d4edc1e0fe3a50774fb78245ec181_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

071d4edc1e0fe3a50774fb78245ec181_JaffaCakes118
Size

96KB
MD5

071d4edc1e0fe3a50774fb78245ec181
SHA1

ba15aa29e57b301cc6f9314dc24768e978c3a01e
SHA256

47a38134ba598e4ec295286e29458faa3906bb00dd5876c2ba443903a3be26ae
SHA512

ca2eadfac684ed2c0048de736f3914ff0a3cf26e5b5e9265319895a874a34b74b956fb3a31fa4441a8dbdd5da1a40a9ad1a8eca916e46426dfbc292361c272c7
SSDEEP

1536:sKq5pUQ9mjm0uM12dwrWpYGPY2UQMYB+8fWb9fDj2cG1HK+t3vjHjE9Ht:opUg8F2SrWWGPiQNB+8fWb9fDKcGo+t0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
071d4edc1e0fe3a50774fb78245ec181_JaffaCakes118

Files

071d4edc1e0fe3a50774fb78245ec181_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ConvertMessage
NeedConnectInit
NeedInputConvert
NeedOutConvert
NeedSendData
OutConvert

Sections

CODE
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ