a2476cfa2705b4b904ac0c800bc4b2d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2476cfa2705b4b904ac0c800bc4b2d1_JaffaCakes118
Size

28KB
MD5

a2476cfa2705b4b904ac0c800bc4b2d1
SHA1

d577dfe4cafd7b6737fe582914a88d9f19b5fd49
SHA256

f49914005f18c22a2eec48bc602f1d0f4fb59e91226f3fda27cf04e6d198f7c3
SHA512

fd79959ef2f3809d5caf835778e714d8afb5a81bddb947c58cd848b3e4fbf4b50038d43dac66b70441ae786f813acff0485040b0be8e0e43a771b108f5ae02e4
SSDEEP

384:wBkgFrlD/SE05I5uPySFCDe7KOiAGpICn2/nRV0NFZINj2g1/VY1PUa0v2AD0GYV:wB3rl7S7VygPf6Wf0fZcCyv2ARY+MP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2476cfa2705b4b904ac0c800bc4b2d1_JaffaCakes118

Files

a2476cfa2705b4b904ac0c800bc4b2d1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop

Sections

packerBY
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE