303b3e9fcad4644904aef9d28cd247ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

303b3e9fcad4644904aef9d28cd247ff_JaffaCakes118
Size

30KB
MD5

303b3e9fcad4644904aef9d28cd247ff
SHA1

be99a1eff0386b63afea6cb102baee238a7d330e
SHA256

18483806b0c0b9e3447a93c07ed7a6a3a5c95e7bf4ba02fb06f618557e979074
SHA512

d766b2a0c9318c2fe14ea26be92437cd06bd7fff6a9a2e6305ce58846121f3d514579d24714a23fbd86e8b0371e875baa9eeda57c8bb5886d6fa8db665f49fc2
SSDEEP

768:UMua4bAZxTd1rrkV6PJyiEDS2kYyrm5dMZ4+Uxw5AHAt9:qjgr1f0HFDSHidEsy9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
303b3e9fcad4644904aef9d28cd247ff_JaffaCakes118

Files

303b3e9fcad4644904aef9d28cd247ff_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE