2ea05af35575149ca63d612de64e5790_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ea05af35575149ca63d612de64e5790_JaffaCakes118
Size

212KB
MD5

2ea05af35575149ca63d612de64e5790
SHA1

14cc83a50be12f6e95c47ac3eca3ed5a48e2a5d4
SHA256

19363787e25dd0aa416a699344299464b92d36c5f6e46c9abf290ec52ce36235
SHA512

b0cb5dfea7bc1cd53c90484701e8172a114302df98451185bd30dcc76e3c247830a5a10b2864d1fe912322baca1a9cf87fd50aad1d2a74324da95b8b77e29b33
SSDEEP

3072:FjSy1kM28/cm02d27bbxMk/z66Q9n5apoa/LNAevE0K5BGpESlw1lWVgo+vAPBMt:ZSKT/M2Q7M9n5apoaDSuE0KShC1eVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ea05af35575149ca63d612de64e5790_JaffaCakes118

Files

2ea05af35575149ca63d612de64e5790_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ConvertBMPtoJPG
ConvertJPGtoBMP
getDesktop

Sections

CODE
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ