2fd2ecd398161ff848611f3983606799_JaffaCakes118 | Triage

Sharing

General

Target

2fd2ecd398161ff848611f3983606799_JaffaCakes118
Size

89KB
MD5

2fd2ecd398161ff848611f3983606799
SHA1

d9c649a0314191b00b5d0fa7de721d6d6fdcf1db
SHA256

cf24dd82fcd7ba875a937f48f21d20c7ce42cdc74035d6d3f3803094ddc1052d
SHA512

87a12addfae3f5edb2ef0241e1ac401e3ca27c1f53486fae35e486ad6562074231dce83cb4db48905ef2afeb1b707afc34142790fe2ed575f4e0194e425c8252
SSDEEP

1536:djqjoQ05q12JX+Xfqtqel/pMn8yilaG8sIT7hQnokNxOKaTGVrh2lWguqtIq:goJa2Qfeq4/p28JlalsIT7hQnpNgaVNQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fd2ecd398161ff848611f3983606799_JaffaCakes118

Files

2fd2ecd398161ff848611f3983606799_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

SetHP
Setup2
Setup3
Setup4

Sections

CODE
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ