a864c421751c0cb544dfae6795a4d911_JaffaCakes118 | Triage

Sharing

General

Target

a864c421751c0cb544dfae6795a4d911_JaffaCakes118
Size

24KB
MD5

a864c421751c0cb544dfae6795a4d911
SHA1

fdf5499cca8fa9150eaa667afa3a523caf1af99f
SHA256

2d91742759bdd44d2d057d2c2438a4e2cb36b883bb42a8fc0bc75d9b85aa6ff8
SHA512

371555e538b34b5e04bf176ff3989eea2927f56f9e748e241ac9f0739fa7e9c6109fca07ae1af2a602b253a06c0b6e17e37299e131f8b97117e6d0bffbc41b87
SSDEEP

768:muPPzi2qSeoRKoIR63Csc+CenwnDAOd05U:dPPziLSe/R63ZrnwnDAOd05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a864c421751c0cb544dfae6795a4d911_JaffaCakes118

Files

a864c421751c0cb544dfae6795a4d911_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ihternover

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ