485990af3239d3ab0d98804f0acb1244_JaffaCakes118 | Triage

Sharing

General

Target

485990af3239d3ab0d98804f0acb1244_JaffaCakes118
Size

12.0MB
MD5

485990af3239d3ab0d98804f0acb1244
SHA1

f9a6f8a08c1850c0c61a3522f127d11f827396f0
SHA256

4907cdb4885458adea7f3ba88bcd15d6971b2172ed9a7384edf95d4460414bc1
SHA512

1ce2cea511769025c86f4d2ee2d9aff320266d64a47dd288ce1f1d4908dc536678302b9fd99456861a09125ccd7fa86ce10611f37ff9f0c1f5beaf6f389ea322
SSDEEP

768:ooiIqZOKQosaSnyJtAPIq8SYLcOT/UIZZjC7U5KgQX8sEp1:ovIqZjQostK5q8SYLr/UI/WQ7QO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
485990af3239d3ab0d98804f0acb1244_JaffaCakes118

Files

485990af3239d3ab0d98804f0acb1244_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

mp_dc
mp_gt
mp_gv
mp_ms
mp_pf
mp_pl
mp_ps
mp_rd

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ