a7148abb8a9ce19840dc16e339d62029_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7148abb8a9ce19840dc16e339d62029_JaffaCakes118
Size

74KB
MD5

a7148abb8a9ce19840dc16e339d62029
SHA1

904832f866e12626eabbf7006f79578f3570781f
SHA256

1f3a9a8260af5fb3524a67697a65260a41cf1197896d8202c48c5b559f1bdef2
SHA512

51249047a1f0e7a144d76059d249ca51c9b895f2826e602a80a9277fceb6e9e197192d3a3913edcabe092740413583627acd8c6b4bb83824e67ad93bae66924d
SSDEEP

1536:fM8n81hftONsOeg2EpRk5/EjblHos8G5F:fM8K5t0e8jbhosH5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7148abb8a9ce19840dc16e339d62029_JaffaCakes118

Files

a7148abb8a9ce19840dc16e339d62029_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

packerBY
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE