60033436d2b420260f509917514a62ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60033436d2b420260f509917514a62ba_JaffaCakes118
Size

414KB
MD5

60033436d2b420260f509917514a62ba
SHA1

e2f92fe08c6a60dfc4806e675339f47a933c6962
SHA256

afb05ac0710dffe865d0a65f2c5d8e36e833e18750924b183e21e01a1357a416
SHA512

a8dc0384807124a8acde44d11736c26d8e41738d417a1e3fbfad1571bba8d26eb713f294160e5d51571f1f7c2109abdaa15f23392e45b8edcfe5e84a6e95d73a
SSDEEP

6144:eJBxkgJ6dSw8n3ckWclkotbJEBoeGiorG6kl+WjzT9ZRn:VVYRn3HkotVEFGiohkl+WR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60033436d2b420260f509917514a62ba_JaffaCakes118

Files

60033436d2b420260f509917514a62ba_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

getDialup
getMSN
getMail
getMess
getNetwork
getProduct
getShared
getStorage
getTrillian
getWindows

Sections

CODE
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 247B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ