a8b0ec6fac3eb314ad3065e8f4f1ee28_JaffaCakes118 | Triage

Sharing

General

Target

a8b0ec6fac3eb314ad3065e8f4f1ee28_JaffaCakes118
Size

14KB
MD5

a8b0ec6fac3eb314ad3065e8f4f1ee28
SHA1

9850d5241b382bdae2b1c0fb7f6bcf31fe96593a
SHA256

7c1b904284d3d7e3709cb76ca0c407f8e2352680a49db4f992205a68c43ca90f
SHA512

38179d8d87b06d4a5716b5129dac4f93f4bae90d34fc08e13dc4b81e5bd469f36784b431a7d63d9a5bdbea8cc7e594e32c8a47634180b3001e167265290a82e1
SSDEEP

192:nS35riBipoLzYGqfz5P+V8o8PVCpiQySQsMs+6OTfwdIpgZ7QjcWlleED:SpxpAzzq9PhQ/QsMbf4Azlleq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b0ec6fac3eb314ad3065e8f4f1ee28_JaffaCakes118

Files

a8b0ec6fac3eb314ad3065e8f4f1ee28_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

run

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ