3393d8d44bb79b3c982a89172a980fde_JaffaCakes118 | Triage

Sharing

General

Target

3393d8d44bb79b3c982a89172a980fde_JaffaCakes118
Size

209KB
MD5

3393d8d44bb79b3c982a89172a980fde
SHA1

914c9175f51f1e97baed231e9adbfdf8916825e8
SHA256

bd1317c606776f5a5e3460025e15ca3e1c949f501351b39cf6f1ddeca8142ea1
SHA512

3cd66a9871b2b854cd1b33c5b12f502f52b5741cbd0b27a273e98c65a8251b19233287b9d8e43342da9095bf7e0641b011a416a01caf99b4c763d1a204cb2dbb
SSDEEP

6144:6GGA4XrRakUFGXhTu5q0kaXJZpjTG+WlcBbLr9tjgQ2Gtt9U3nqiq4obPvRhMEkh:67AGECdU1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3393d8d44bb79b3c982a89172a980fde_JaffaCakes118

Files

3393d8d44bb79b3c982a89172a980fde_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WSPStartup

Sections

CODE
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 31KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ