3f3b098a0bc94070baa83f2b60e08f13_JaffaCakes118 | Triage

Sharing

General

Target

3f3b098a0bc94070baa83f2b60e08f13_JaffaCakes118
Size

72KB
MD5

3f3b098a0bc94070baa83f2b60e08f13
SHA1

6c2cc28b9ceae88d5c6bbc39b0c1c4a7490a2a3c
SHA256

9599efbc0174aec1b0ab86947219bff7b8cfa1a0e8d4b17235af87994c940d24
SHA512

84ee061bebc275e0bff92f611b8a477ce4ce945a538d3d5313b7f86b878763d3ff19e78663aecc0122002f068a55446de5f851249f8fa6db0087e903a1ef2b47
SSDEEP

768:mk0pisvuzgdwMG9hl7c1McuEcnf9ZuOii7neNmp38buVcjazpRd/KkoI2HNdA:j0plSbm1afuOB7eNwMCVcWzpR7oR0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f3b098a0bc94070baa83f2b60e08f13_JaffaCakes118

Files

3f3b098a0bc94070baa83f2b60e08f13_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ