b572d4bee7973e3d4fe49d8eeb2c26e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b572d4bee7973e3d4fe49d8eeb2c26e9_JaffaCakes118
Size

534KB
MD5

b572d4bee7973e3d4fe49d8eeb2c26e9
SHA1

324ad509851c4330e24970386cc758493373bfb9
SHA256

36498541ded09f7897abddf0d4c5b43c8240cd2f0de88f7337617e4f507d12df
SHA512

fa32076b336c2745fec6cdc32d4838f7f8814e957003c7bb020517ca0cb7b08a43b5fbcc8cb5d2ccbbca078d6f097d6d15a5b000f64d3fc1f54806489ec28ba3
SSDEEP

12288:T4Kur4byH/TW+XocM3Xc/8I5N+Yi/ZiZLU:TngfTVy3M8Ibqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b572d4bee7973e3d4fe49d8eeb2c26e9_JaffaCakes118

Files

b572d4bee7973e3d4fe49d8eeb2c26e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

init
main

Sections

CODE
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ