b4865f79990aad82a979e7304a90c51a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4865f79990aad82a979e7304a90c51a_JaffaCakes118
Size

76KB
MD5

b4865f79990aad82a979e7304a90c51a
SHA1

ffe5676eceb12419448a3bf221c27cec6292a720
SHA256

f02bf635875733f44238c527d67fd2deb274ca7ccbc0e4e8ffa2f7e25e507dc4
SHA512

c23561681ea96df8da72a74491008a98fc87bbc624cf4fae5947301084c30c9d41e46aa7d17c5873160b8184a1d31ef54efbbae611b620f068dd6a5b38fbdb61
SSDEEP

1536:Kc8n81hftONsOeg2EpRk5/ECwRXU0Iay9i:Kc8K5t0e8CMXU09y9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4865f79990aad82a979e7304a90c51a_JaffaCakes118

Files

b4865f79990aad82a979e7304a90c51a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

packerBY
Size: - Virtual size: 187KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE