4d93d8a44f65e82cc380ae8b3e1bff13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d93d8a44f65e82cc380ae8b3e1bff13_JaffaCakes118
Size

70KB
MD5

4d93d8a44f65e82cc380ae8b3e1bff13
SHA1

e9832d9837be89d63d7235807920272f29c7cedc
SHA256

efca28a3774474d3e62deeb98e62409c2d1603918377370550f0b6cad65b3a54
SHA512

91d823c425878b92cf67420e59eb9b55ed1823171e405a9b852c29288bf32e6448c49069a9f50bb74bbbcd8dd3221618731cda0c91d662528e884901dc8d2779
SSDEEP

1536:9USqgSVUKqhl5lgk6e0ga73fF64TMUdzdySNCtxiA9b6zLF:9DqHVUhN365g+F64TZdzdySQt8A9bwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DSC2907.cpl

Files

4d93d8a44f65e82cc380ae8b3e1bff13_JaffaCakes118
.zip
DSC2907.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ