8af57ee54e49194572fc21abf56d9de6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8af57ee54e49194572fc21abf56d9de6_JaffaCakes118
Size

52KB
MD5

8af57ee54e49194572fc21abf56d9de6
SHA1

f7cec101bf7afedf65b4286af78036e98471ff1e
SHA256

c1b47305f2c0e0d151501cfa16d6677e413225de06d64b54597acc64eafbf21a
SHA512

a4d84fba3c594b5c371fe001f891c188a61edfd347e153a811f383a48d84b621b42135c5ae69ada2b9f295900099406fb2b1a5ad08209d0eb5aee5708bdc2338
SSDEEP

768:PSgTZRKJS7ft0gbY6vZ47aoawr4kcWwtu23JGIDbQ2jJiO1fZIyJn:PSgeJGfmcvZ47zaocNupcQQgIJn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af57ee54e49194572fc21abf56d9de6_JaffaCakes118

Files

8af57ee54e49194572fc21abf56d9de6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

08dbee30ea21880671075392be00aae1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

exit
free
fgetc
_initterm
fputc
calloc
_iob
malloc
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

DESEncode

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ