2ec6709d3fbf33083f759064681863fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ec6709d3fbf33083f759064681863fe_JaffaCakes118
Size

140KB
MD5

2ec6709d3fbf33083f759064681863fe
SHA1

fdd26b7cf44e36d62e8df3c995a02e32ef474c89
SHA256

8e34cb9cbaeb45afb92a253b9ac8636d18d36f75f6feb84e3896028d157d5023
SHA512

9c6d843dc53a65ec2a0e26bafa484c26bd55fa3e98ab0eff4bf66a983bc5c379d11522929730983eff9007cc82f6ceb90bd6ff0d6cea234c9cb9ade55cd9f16a
SSDEEP

3072:dmvkamPnDb7TlKGxnH0nclew05pf4tCBbszpeNJOrZ6V+oy:Ivkpn1KEHZipf4tCqzpcJOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ec6709d3fbf33083f759064681863fe_JaffaCakes118

Files

2ec6709d3fbf33083f759064681863fe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

jSta
jStb

Sections

CODE
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ