ae2db3f6991d28b7c7d9070996c55044_JaffaCakes118 | Triage

Sharing

General

Target

ae2db3f6991d28b7c7d9070996c55044_JaffaCakes118
Size

91KB
MD5

ae2db3f6991d28b7c7d9070996c55044
SHA1

b2f36633b18e3fd2cc7cb539248c6801a852e462
SHA256

dea42dcd8f7bb2a6bfac99c12f733bb04e234ebd92af1fb06d093a5f9fc00099
SHA512

f261684757408f3c09deaaac8331d54bb64d56e7efe8a973a07454fcf054f30673d102eae850d58bce85c6277ef139942c507d889f04c98c796094a10f670321
SSDEEP

1536:8RfpLkR3Qcm7j5X09etgrHddRT9888888888888W88888888888Bvn:8RfpLkRAp79XBeHdX9888888888888WM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae2db3f6991d28b7c7d9070996c55044_JaffaCakes118

Files

ae2db3f6991d28b7c7d9070996c55044_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

UruchomionyTlen
ZabijTlen
libPatch

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ