5c7845f3920784011d43c9cf1127a03f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c7845f3920784011d43c9cf1127a03f_JaffaCakes118
Size

936KB
MD5

5c7845f3920784011d43c9cf1127a03f
SHA1

b81c64cc3542e082aace78f439a99ccf36b921e5
SHA256

61c197972ddba52cf0de744ce5affbc85f52984371731ae4332f6923ae62790e
SHA512

a7f3070fc822e2901540c151f02938ff9961dd8e9c1ee1ccf9ee81ed28a7b9952c9145bcf4ac158a3a04c04d0adff3142fb4f0b08f55c797364c704fe2955e88
SSDEEP

24576:DJy6GrS7YcuMTTU148gtIR3PdExx7DrP9NP3vRGiNFsxDzIKcYRL:DJy6Gt8Ty48gsFE7PvvcxDz7cYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c7845f3920784011d43c9cf1127a03f_JaffaCakes118

Files

5c7845f3920784011d43c9cf1127a03f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Askcpreak
Cgqghtwd
FdgsKCaa
Ikcvapc
IsWarrck
Lpdfqcga
StartMz1
Txcgbsprac
aipk

Sections

.textbss
Size: - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 910KB - Virtual size: 912KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 690B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 219B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ