ad12eae3c09b1276f4ef3f1ba6d719dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad12eae3c09b1276f4ef3f1ba6d719dc_JaffaCakes118
Size

942KB
MD5

ad12eae3c09b1276f4ef3f1ba6d719dc
SHA1

4e903a92deb5a56788c307d67841e6dab5e725cd
SHA256

ca97d87caee38e15b102e8faddfa89997a6e6386bf012b3e92e8e2b78f1ee2be
SHA512

c0124f2c0fa7cf50922010570a9d26082961d7dd8ebc5e219935bf86eaad1c4904df2b90cceea535be67a6fb7ba27811ad1ad4ffd6d60d2e2f7b9402ec2ab702
SSDEEP

24576:y0HIDVv5btGoZa3YadzOIuVV5wxh/ZwJUK:foDVv5btGoZ2HOwxhxW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad12eae3c09b1276f4ef3f1ba6d719dc_JaffaCakes118

Files

ad12eae3c09b1276f4ef3f1ba6d719dc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

toBervices

Sections

CODE
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ