5c9d45c79c794d43de0ac5c4ca34b0cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9d45c79c794d43de0ac5c4ca34b0cb_JaffaCakes118
Size

274KB
MD5

5c9d45c79c794d43de0ac5c4ca34b0cb
SHA1

ee5c19f9138e3e2ed49e023f9493879efd12103d
SHA256

8538dd62302572d0319f181cbe8ecd6f135dae077a341fd323ed8330080e3fd1
SHA512

56536bd1cceb691a5c242f916b6bff015a7e245c7eaa49deae2ba8c335ee54f543b3d33528d741648de208d1edc5c54c52d0018d1a79416e4860b4adc7987860
SSDEEP

6144:evhTdLlAPJtxrwkpm1SjkQgkCqXP7w1Y4:ev/lIx8Mmgj/g1qf7w1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sendmail.dll

Files

5c9d45c79c794d43de0ac5c4ca34b0cb_JaffaCakes118
.zip
sendmail.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Decrypt
Encrypt
Enviar
config
send

Sections

CODE
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ