1587a9012b85dd992ea0a2a78d7c65c8_JaffaCakes118 | Triage

Sharing

General

Target

1587a9012b85dd992ea0a2a78d7c65c8_JaffaCakes118
Size

146KB
MD5

1587a9012b85dd992ea0a2a78d7c65c8
SHA1

1962b07a15bd8e6d75922a27c9bdb5d187fea0c6
SHA256

8fcca1a58ed6bb3cd4329c917b1cf0dafd032b0c22066ed916819a9d276be9c0
SHA512

e108a5c2a0a83725ccd982fd0501ace24425af3cec8ea1e2bc7e3644acf1257db4de29b5805ec4eb6337e9e6c9d12230b6989fff355d336026ad5fd94b18cfd8
SSDEEP

3072:7b9GCF1+SJd6uFIPjePhk7uK70F/mbosBuzV7QzvInn6LY:7b9GCJEuF/k7uKkU25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1587a9012b85dd992ea0a2a78d7c65c8_JaffaCakes118

Files

1587a9012b85dd992ea0a2a78d7c65c8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Add
Addink
Clear
Delink
DelinkEx
Reie
runonce

Sections

CODE
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ