08bbb05feee79e182a45dfb58bb7fc12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08bbb05feee79e182a45dfb58bb7fc12_JaffaCakes118
Size

988KB
MD5

08bbb05feee79e182a45dfb58bb7fc12
SHA1

9e14c49933c03d641ed8e6fd0b00887f33952ebc
SHA256

f4528390d27de0e592443604c504fc3bc249f6d25a8a3e83ff0c1a05a80cdf6c
SHA512

26559c67b0390074950c122a058c2600ac18a3d23e6fe76c405d010ce6d147f228bd801d204828b0c09a571f5fac18e0df9ef271e2df708b5579f01d8bb856cf
SSDEEP

24576:YxsK6ZAPlOPQ6TACR9fATwe0BmQte/7C:YJPETACskDBjWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08bbb05feee79e182a45dfb58bb7fc12_JaffaCakes118

Files

08bbb05feee79e182a45dfb58bb7fc12_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

FastToMap
TestSD
VMP��ǽ�β
VMP��ǿ�ʼ

Sections

.text
Size: 666KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.MaskPE
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ