73dcc6eb5edceb1ce0fac3917fcf444a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73dcc6eb5edceb1ce0fac3917fcf444a_JaffaCakes118
Size

140KB
MD5

73dcc6eb5edceb1ce0fac3917fcf444a
SHA1

d5df2e121599058282b6412cb73426852561832f
SHA256

ec8992a24434034c9b314990c282e7520893f368e5ea4062c81c4c424f374387
SHA512

2d9cca3dfd2f8758ec107c194596ef505032cf5cbf5cd1ddceb1a3e0e302e773d4c386fbd33279f7b946231dfa0d88860c495a9002d9b68e19e3a477fcd73b30
SSDEEP

3072:dmkEsMg3h37i/6n7lG1Bvb1VeKZHwUjQxZDvIZPI9YRZXfBunVa+VIq+wux:AkE075nUb1AKWeRZXfB4a+aq+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73dcc6eb5edceb1ce0fac3917fcf444a_JaffaCakes118

Files

73dcc6eb5edceb1ce0fac3917fcf444a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

install
uninstall

Sections

CODE
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ