0f57e22e6e7a5336df71877a268451b9_JaffaCakes118 | Triage

Sharing

General

Target

0f57e22e6e7a5336df71877a268451b9_JaffaCakes118
Size

70KB
MD5

0f57e22e6e7a5336df71877a268451b9
SHA1

961fc4c2a96c5e2afc637ea0b4461bd7ccdbae37
SHA256

3b8f2e153b585157ec51f18f8faaba7d6ef6dddd8afbad3e3ef68fd1a695c79f
SHA512

63e4427a3db1e731bf4635d81f33e61469bf4c46c022b0c7350f35125c42a919fb1c6751a771b7c4bb83987cf44cf1c7ccb1654af8bad0f064f4969d39ef5509
SSDEEP

768:okFpisvuzgdwMG9hl7c1M5uEcnZ99AOveXOuxKKVp385BRCwBqcqZkwZEn4LZ8:JFplSbm1rtAOve+kKKnMZCkqrZkkEn4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f57e22e6e7a5336df71877a268451b9_JaffaCakes118

Files

0f57e22e6e7a5336df71877a268451b9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ