85a8aa82e7863dc2b0ddc468b25c9b1f_JaffaCakes118 | Triage

Sharing

General

Target

85a8aa82e7863dc2b0ddc468b25c9b1f_JaffaCakes118
Size

15KB
MD5

85a8aa82e7863dc2b0ddc468b25c9b1f
SHA1

bfc4f79753aad2374401d15a1407a15fa435e0c4
SHA256

6b22985097b268518dfd07b40013c341a25f8bb5913620c79553b3871ff839fd
SHA512

2a3fe66918ff1de20a5422dc3030554cc87c6b4e6a8268047192c53ef9f00df3936c58d942c19d1d2d95d35b727933d4459d5bdfae94089a55f17c858a7ba99d
SSDEEP

192:nuAR61A/0LiwxqfKD6Vk/gqWhiQ7SQ92s3AbmCmaKMwi9+2kQjcWhjzGB:bRx0iwxqsRQmQ92FbFGiQ2kAzxzo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85a8aa82e7863dc2b0ddc468b25c9b1f_JaffaCakes118

Files

85a8aa82e7863dc2b0ddc468b25c9b1f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartPenetration

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ