37de66c51ef8fd8aa2cdc3880090eb9e_JaffaCakes118 | Triage

Sharing

General

Target

37de66c51ef8fd8aa2cdc3880090eb9e_JaffaCakes118
Size

903KB
MD5

37de66c51ef8fd8aa2cdc3880090eb9e
SHA1

aef5acd296fd710678b013cfb14b28f02f8c9dde
SHA256

ce1f0d50c757e2c706f1c6477c34fa83b4789c95902552f54cf9d4b5029ae1c1
SHA512

3d21b6ffe93144a9b35fec1fee618e919aae53d539d0d7c15e0c34b99addefd615e65e15510ecedeee2342a82c3724873334d9530553a9fc2b7f2d288760e6ce
SSDEEP

12288:kYanZR54YsHUT5U5Jo5/QfzsA7qd5IJDhVDMdv12tMLTiVbcllKsgUo:8ZgYs065JoiI/dmJFVD0TiGlsUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37de66c51ef8fd8aa2cdc3880090eb9e_JaffaCakes118

Files

37de66c51ef8fd8aa2cdc3880090eb9e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

toBervices

Sections

CODE
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ