b3bd19f1e07400366eecbc6292b1bf05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3bd19f1e07400366eecbc6292b1bf05_JaffaCakes118
Size

170KB
MD5

b3bd19f1e07400366eecbc6292b1bf05
SHA1

0bdec86d9c8b176af963415190ab0aea0c269e87
SHA256

5092ae75139f9e8e672df3c4ba52df118c020d60484786d5db49dd905e65b9ba
SHA512

9200cb316b80157bd4423332ebfe9dbab1ba590e14bd38c11c87fafb2aca8a8e0448d508d2064232a32a55654147edc834a1c83b703277b91cb92cc3c1c7b0af
SSDEEP

3072:wtAQ4QTV6NDbmpiW72Zvhwgy/el74NcXizpQ6Nw0wbUbVLZ5sji0IzsYLtGvvvW1:hQ4QTV61WR7KhE/0+dnEhAtKvWmk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3bd19f1e07400366eecbc6292b1bf05_JaffaCakes118

Files

b3bd19f1e07400366eecbc6292b1bf05_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DownAFile
DownAPage
RunFile

Sections

CODE
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ