674c6c67416ce35c6bcb5b594c0d6af8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

674c6c67416ce35c6bcb5b594c0d6af8_JaffaCakes118
Size

115KB
MD5

674c6c67416ce35c6bcb5b594c0d6af8
SHA1

e1db94ac5c4b97ea810a0270aff7e944a37d55c2
SHA256

4c17bbd6a82a9e0ac4909fadb7f7a8fda76284700938f5ee98f6889d1d5bce4a
SHA512

c98b8f12ce4aab9fe009201f91238e88be64223667e7b7d06d67d6b359069c52f23c3a2480cb2f7179a63989de6db19eaf3c066f66687c38159bb9767c56c0ef
SSDEEP

3072:0JxU6TtJAEJSWBTq8URNiDMGF3FrAs7AhMKCy:uxU6mEJ3BnD1F3FAoAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674c6c67416ce35c6bcb5b594c0d6af8_JaffaCakes118

Files

674c6c67416ce35c6bcb5b594c0d6af8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartH
StopH

Sections

CODE
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 83B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ