6152c2744699896c5be03d6eb3c82d1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6152c2744699896c5be03d6eb3c82d1e_JaffaCakes118
Size

411KB
MD5

6152c2744699896c5be03d6eb3c82d1e
SHA1

b2217e6b3ba9627b662d59babd5dd558be78f864
SHA256

d5829774ed4528a0fd098e2cd6abf49b474522aa4ca12e857b067da54254f50e
SHA512

46e018ed3fc50f3a31ba909c93e97978303a003b3f376d669188994f316a6d75cb62a64ddd0887f5fb83832479d0187c5f6cc0e793a82f2a90eb2a73f7077c5e
SSDEEP

12288:qsfxuefnxAMAzB7dtdLAS2bWr+gcEc3CZpry:vfxtOMyxchw+1ECUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6152c2744699896c5be03d6eb3c82d1e_JaffaCakes118

Files

6152c2744699896c5be03d6eb3c82d1e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

IEShims_Initialize
IEShims_Uninitialize

Sections

CODE
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ