949d14d40f837ded6917ecb01353141d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949d14d40f837ded6917ecb01353141d_JaffaCakes118
Size

48KB
MD5

949d14d40f837ded6917ecb01353141d
SHA1

8302876815aafbd9e8dfba7428ecc79829efc1a4
SHA256

335488826473049796cd8816d173b92cdbc909e7dd53bca493e15f4bfa5f1cca
SHA512

2131bcc50143fe40b020ac623256f3fe75f7e59fa9e9f45c410cd886270185bb307e90cabecdfa77dbe0b72b3b12045b738ce8daa5a97c8cc2860e12728375b8
SSDEEP

768:6SzMqQ+j/QOyP2pVfM2EYRiE1gEiNUFsVf+yOFy2XZJF3biTehjv+AccX:NzMqRj/Qdi9z3SUsf+xA2bgCsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949d14d40f837ded6917ecb01353141d_JaffaCakes118

Files

949d14d40f837ded6917ecb01353141d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

t1
t2

Sections

CODE
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ