a7062ffc03828168b47a84f99365c8a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7062ffc03828168b47a84f99365c8a8_JaffaCakes118
Size

30KB
MD5

a7062ffc03828168b47a84f99365c8a8
SHA1

9420120796b1129cf725e7cfa002abbf68599d42
SHA256

0796a45050e3b3ae44e48cd8bba8e3af1ccb12367af843290db5bf34667d233c
SHA512

61040067caa1e441bc3f2fbe2456e1d1e8976a21063c9d3cfe3db8194e38c23428ae12ea1628b9d2163b16bac17501525112af2896f2f7e00602e503c0790563
SSDEEP

768:1Mua4bAZxTd1rrkV6PJyiEDS2kYyrm5dMZ4+Uxw5AHAt4:Ljgr1f0HFDSHidEsy4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7062ffc03828168b47a84f99365c8a8_JaffaCakes118

Files

a7062ffc03828168b47a84f99365c8a8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE