5ed7fc2d309d5ab6a37b5a77046ae2b7_JaffaCakes118 | Triage

Sharing

General

Target

5ed7fc2d309d5ab6a37b5a77046ae2b7_JaffaCakes118
Size

41KB
MD5

5ed7fc2d309d5ab6a37b5a77046ae2b7
SHA1

43ba3fef5a17504a40b38c0a2acd903db5fb83b6
SHA256

c6faf6208b98c8c52488217b89ec9a197e54c6ac5be2b7641794f7cab665cc2b
SHA512

5b02f61d716c4a1600e86b3c24f29d69abee26d7b9540f0e8dcb52d4f7b3fb98b137ddf41c0d0da1f93e7087a5198031cc39a3726612df0b9c3c16837a904af4
SSDEEP

768:9C4qfQR4RrQDJKcUGlTU6YjQPF+ifqXoOxdaFGiW/0ctj55m0tJjC:s4qfQqDLwU6aQQEqoOxdaXW3H7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed7fc2d309d5ab6a37b5a77046ae2b7_JaffaCakes118

Files

5ed7fc2d309d5ab6a37b5a77046ae2b7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

k1
k2

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ