19d8e47b6908db8c350558585b48e800_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d8e47b6908db8c350558585b48e800_JaffaCakes118
Size

836KB
MD5

19d8e47b6908db8c350558585b48e800
SHA1

20852f201df43c3c016eb93dd33efd5027109c42
SHA256

25e0694ba29c1a428528654598044631a2e07fd56455e5ec995f559203466617
SHA512

94435d6d1c7c644504b5e4e51b633801b8b87fecf51ae146d0447ab595df917d6d9c521bba91dbfbd362652376033672bdc3879698bc466a191cbf174ccfd904
SSDEEP

12288:mz6dHSQV9zntOsCVA9AWZk+eNPOiW/yOVAa7QPoCMC5zUX/unEIZUlxOnY7a+9:muRB9ZOzopWrW/yOVAW2oCMhvdIKxQXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d8e47b6908db8c350558585b48e800_JaffaCakes118

Files

19d8e47b6908db8c350558585b48e800_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoeServices

Sections

CODE
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ