a933f9cbb6eabbcae999d11f3f6a96eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a933f9cbb6eabbcae999d11f3f6a96eb_JaffaCakes118
Size

76KB
MD5

a933f9cbb6eabbcae999d11f3f6a96eb
SHA1

d9ded987b0ae8e1f6d27d78aadd23136250115d9
SHA256

2003bdf909d09d2314793a4ff12b3beea9957770a36fab222fd763eb3a0b6970
SHA512

7772470c40f84e5e8b31890aef7f2fb2bb35dc9f49623d757d235e7beeca8752f35a98be7281b0c1fdd99d7b7fd5148cc40cf7e6eca6bc71066aacf8ed4938e2
SSDEEP

1536:VLvFu5TX1MRwb5Q4murKR/RgqrQv18V2Szu4EPrBgb78PzLk0sq7zNosMT:VLF2CKtQ4muwWUKuVfu48rBg4/sq72

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a933f9cbb6eabbcae999d11f3f6a96eb_JaffaCakes118

Files

a933f9cbb6eabbcae999d11f3f6a96eb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

packerBY
Size: - Virtual size: 190KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE