5fd4ab5fe31d283b30dd8b920540e1a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fd4ab5fe31d283b30dd8b920540e1a6_JaffaCakes118
Size

348KB
MD5

5fd4ab5fe31d283b30dd8b920540e1a6
SHA1

287caa62fbd11dfcadf96c7c49ff6ea2f0b3df4e
SHA256

c7b59a92bb6fc9e17c4df3228935e8cf3016587e71239af6f2b0c93cdcdd8d51
SHA512

7536b61a4a61723d3adc7d1ac2814758ffefd58363a610aa4b823d15e523519de9ed959b671b0f9647fafeca1a36b6284bc5cb038fff5b85969c8dba68ad019b
SSDEEP

6144:QqrKwJZXDacvW7EA3innp1wDwP79UaR9qFGvCAaIWc:nXQEA3iLwDKHRQG8IW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd4ab5fe31d283b30dd8b920540e1a6_JaffaCakes118

Files

5fd4ab5fe31d283b30dd8b920540e1a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

OnFireFoxUserData
Start
Stop
TmStart
TmStop

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ