69fe982f8d68270bbdb7aaef46824d6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69fe982f8d68270bbdb7aaef46824d6c_JaffaCakes118
Size

413KB
MD5

69fe982f8d68270bbdb7aaef46824d6c
SHA1

a0558fdb8aa73b03d8bec5c0438ea58f787b648c
SHA256

d5825e19eaade7c843783243f9d38f187b9336de9a4a99baa9e925524948a344
SHA512

f63ebf1c9670ec27c3fa84f2f80c8ca26c898e319b63b4692a88d16a8cbff3d481ffda69ed852e2be313aa40a47ec06f4809c61c46d40a7b127d6ffcafc670b2
SSDEEP

6144:Ww8jnx5JRlnZJcrRHygaa3Kvwu4GDe3jfYzmYiKvNUAEv7h84jW2H8V8K5QYFs:Wxbxt8RHygd3k3rDiQzicUAgHHgBvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69fe982f8d68270bbdb7aaef46824d6c_JaffaCakes118

Files

69fe982f8d68270bbdb7aaef46824d6c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateSubjectCertList
GetKeyType
HashPassword
SaveContextAlloc

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ