0b8363e3be5487c0b22e5e04ded56c87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b8363e3be5487c0b22e5e04ded56c87_JaffaCakes118
Size

173KB
MD5

0b8363e3be5487c0b22e5e04ded56c87
SHA1

5122babd57e27af05a6db90eaf7bb4444192bc19
SHA256

c23ffc802e95f1d6f250ecca1f82fbe17d54e5feee2c985c3a7d408057f813a9
SHA512

791f9242d296b2250db97a1be42dfaa8b47c31ebb4d085ba501cd7a9ce615c645da8ab13b963445a8d9fa245b9f53c83ca82c4f0c3e03843980dc4830c528156
SSDEEP

3072:rnhG7Xtr7YNIMNGp6uy+MXlNwf831HWkXqzpA0mDYxnwr73ia:jhq9rn+q6uy+KlNwqHGA0mDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8363e3be5487c0b22e5e04ded56c87_JaffaCakes118

Files

0b8363e3be5487c0b22e5e04ded56c87_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\gabpath_work\GabPath_full_code\code\projets\contextuel_popper\exe\src\URLComponentFF3\GPFF3Component\Release\GPFF3Component.pdb

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ