695d1da6e6f4f58791fa15f4a0bb6cad_JaffaCakes118 | Triage

Sharing

General

Target

695d1da6e6f4f58791fa15f4a0bb6cad_JaffaCakes118
Size

402KB
MD5

695d1da6e6f4f58791fa15f4a0bb6cad
SHA1

ebd98987c6a623462ed9e34ca96c16b8902176f0
SHA256

711fab5d7323a5a71e2a240b2ef4d6285dc8f0d6bf862d7e683bf42b12c41e01
SHA512

1384fdb6cd345b03661628d1b9b7907beb9f1439b806225a3924ca9447941446c39e7794d8cf890f9ffe62441f86b65b018fadd7543518bfede036b03df73de0
SSDEEP

6144:BHQup/0vqOV4gGcWEwNHXuXnfnM0u4YBi/JHVYwo+9nWQJ6Tt/9Vu78SJV9UDsmv:JpMvbCm7yiTXnbJ6h7vSJV4sTArxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695d1da6e6f4f58791fa15f4a0bb6cad_JaffaCakes118

Files

695d1da6e6f4f58791fa15f4a0bb6cad_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

IEShims_Initialize
IEShims_Uninitialize

Sections

CODE
Size: 391KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ