19bb85bae230d004b173343a5fe98888_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19bb85bae230d004b173343a5fe98888_JaffaCakes118
Size

171KB
MD5

19bb85bae230d004b173343a5fe98888
SHA1

66eb035778785d8d9d047b18eb9e1bddd9d16e30
SHA256

c05f2544e03f922edb23fc59931dad63562a97974abed858e43ce5047f2b98bd
SHA512

513cc217efd57c1d3a9bccaf1b3495701d094fc22bc5cf433c8f3873871635276b455f8e30d50618cc3e2783496753333bab9e2fd095060cfd7b752eccb12180
SSDEEP

3072:kSrhw9w/d+EpfLAFOkQpSAUH0ySbzmZrXY96v1wgFTNLP3kLSBJHnEf0hTBfwwq2:kehXB7kQfMvNQLgEf0hTBY5iZt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19bb85bae230d004b173343a5fe98888_JaffaCakes118

Files

19bb85bae230d004b173343a5fe98888_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ