b298995842fefd0d6136eeb7fe50de42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b298995842fefd0d6136eeb7fe50de42_JaffaCakes118
Size

220KB
MD5

b298995842fefd0d6136eeb7fe50de42
SHA1

b54c2c74bab00e22fadbfb1a2f1381601aa14c1f
SHA256

83e3daaf4178e63be510c8188be9ad72c37b42ebc3760576254b6c1a223c2696
SHA512

9efd5cfdf72005d65da0c3f90b6c52da088576098832f23c4b9ecea34bf8b64ec675a5a5c4d76f3f120ef8ad4ad5d9228f7517a590df8480fa73d6f2d38ab666
SSDEEP

3072:PtjGel4oRxJPIq/rKlH3c0xm7sB+pvNHpsKup/LDO74UHohphWhmhh5IhhUhcJYy:Vjfum7sB+3Gji74SC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b298995842fefd0d6136eeb7fe50de42_JaffaCakes118

Files

b298995842fefd0d6136eeb7fe50de42_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ObjectExplorerReplication.pdb

Sections

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 512B - Virtual size: 47B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ