63610cbd825cb1b47b875354ba8af98b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63610cbd825cb1b47b875354ba8af98b_JaffaCakes118
Size

274KB
MD5

63610cbd825cb1b47b875354ba8af98b
SHA1

caff999b160ac17e91ca5db08796ace354a64d48
SHA256

47ca168a265737b68ed5236d0468591226f948d535f9dcb554cbaa243490ec11
SHA512

4ad62f8d147a734bb7a13d8e58c53160399a96d70bdf4ea9635a558c35b29efd2e2b20e02a4a6c55e4bae9d30d6be8e8d0cf6861c02602df42b0a0d1d05f6e93
SSDEEP

6144:W3MuYyQODZGKbJBi09UceWvdPl+g1EHpco/y:taZXLi9gFIg1EHnq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63610cbd825cb1b47b875354ba8af98b_JaffaCakes118

Files

63610cbd825cb1b47b875354ba8af98b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateSubjectCertList
GetKeyType
HashPassword
SaveContextAlloc

Sections

CODE
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ