b28d2bffb39d54d63d94255c561c4360_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28d2bffb39d54d63d94255c561c4360_JaffaCakes118
Size

171KB
MD5

b28d2bffb39d54d63d94255c561c4360
SHA1

466c7aa6439e497aa6861e141b9c6c109174d3f0
SHA256

abe29f94d29f45ba94d0e96c059ddac2945249b185f2b05c6e168b2465d85b2b
SHA512

73311aefc119e7b0e64c63f08728ad8823abb961e64977dd566abecea15ef3474aa09425d39e39e774b210557d33b6e2a59e1c5379ebeb6aa11bf71c867074e0
SSDEEP

3072:kSrhw9w/d+EpfLAFOkQpSAUH0ySbzmZrXY96v1wgFTNLP3kLSBJHCN4hTBfwwtnD:kehXB7kQfMvNQLx4hTBYiis6v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28d2bffb39d54d63d94255c561c4360_JaffaCakes118

Files

b28d2bffb39d54d63d94255c561c4360_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ