8eb2bc5d54e01520c0fc8e51d795f6a3_JaffaCakes118 | Triage

Sharing

General

Target

8eb2bc5d54e01520c0fc8e51d795f6a3_JaffaCakes118
Size

86KB
MD5

8eb2bc5d54e01520c0fc8e51d795f6a3
SHA1

b5abecd68e5e8f6b380c1f24a324bc824965822e
SHA256

2e35c97b3f98b3f5b18b6346973b2aced633cfb5b6b6c322400b1c6e5881f92b
SHA512

fff79ad9a3bbc771fb58a9bf1ebec5fe31fce0fc986044656f3c7e0419b6c43055b537279ab3ac6c6ae4fcf50aa0c58fe9995801ff1652ea3fda16866cc10122
SSDEEP

1536:WnKzAZzBA7pM1Un1PLEy4nYqOHkL21hWklyZXa/DR8:vjYOzhWDZKbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb2bc5d54e01520c0fc8e51d795f6a3_JaffaCakes118

Files

8eb2bc5d54e01520c0fc8e51d795f6a3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\savxp\build\components\release\SAVControl.pdb

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ