6432ead3905471067d951a2cfc3f7479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6432ead3905471067d951a2cfc3f7479_JaffaCakes118
Size

35KB
MD5

6432ead3905471067d951a2cfc3f7479
SHA1

f9ddf142dbe57896b6e15aea5a47cfdcef1a519c
SHA256

160d640c0ac1bf3e2eb17c861722d4f79115a9be18dc8d8efe67da0001dbbcb2
SHA512

80d7d1bd1e139077b06761affdd10aca6b1aee51de5342dbd62a7e3a27d0e4a27e58b783db09ff7905ec86f573caafb013292b6952b8285e7acaf52c1276dc3b
SSDEEP

768:kbju4YDqRVszLUp7ciIPn3t0tqGWkd0mK9iauBSLxGUO:ThDqRVsfaa0n0m1IMUO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6432ead3905471067d951a2cfc3f7479_JaffaCakes118

Files

6432ead3905471067d951a2cfc3f7479_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ebs
zxhkof

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ