8505af65dba4afe0a23ac3c2be258f81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8505af65dba4afe0a23ac3c2be258f81_JaffaCakes118
Size

373KB
MD5

8505af65dba4afe0a23ac3c2be258f81
SHA1

55fbc21f6b4b03e87d7b98cb2401aefa51352a93
SHA256

39f0c1f1ddf8c60a525c215a0ae475ed11f17fa342d712a6cd9ea76a91024de2
SHA512

3f6222021a30cbc253a81aef52f6e5a6b3e62570e379b791df3608b1a76f0d0e63b2017e72e8ad104db88d1d49c79b19550a345b90969a34a0f457e9a22f5de0
SSDEEP

6144:u3tlN453C/c+xuHJJvnSj0J83S+0inlLTT6ns+HmBCAuLWxsrCl:KNS3C/txu7vnf8z04LkThWxJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8505af65dba4afe0a23ac3c2be258f81_JaffaCakes118

Files

8505af65dba4afe0a23ac3c2be258f81_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ