64076ffa3631f396fe942e589bf3b187_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64076ffa3631f396fe942e589bf3b187_JaffaCakes118
Size

95KB
MD5

64076ffa3631f396fe942e589bf3b187
SHA1

c74d692a6e62665c30bf510fead3b46abdcc70c3
SHA256

cbc4df08813440a6ef5b10307aca5710c7c9f64c71008e8a4fdf039a85b2faa4
SHA512

c27c6c5916869420791e6f4063cf653f0408c06f9658252f5cc36edb41fb81d3fcd125447065855a8baad4111df7291d9149b1775d2d46a0f5307aea50726570
SSDEEP

1536:VM0cXHqlQmbryHzY6QbjU+/gG7Wiu3MA1m15q2mqb7Yb67gVz1ZWzNqwix1Rhy:VM0W2Tbryp8jU/G7WP1Yk2DXYbMg9nWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64076ffa3631f396fe942e589bf3b187_JaffaCakes118

Files

64076ffa3631f396fe942e589bf3b187_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

wSta
wSto

Sections

CODE
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ