ba1c3114b5a844c3b875a7b72eb4ff10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba1c3114b5a844c3b875a7b72eb4ff10_JaffaCakes118
Size

777KB
MD5

ba1c3114b5a844c3b875a7b72eb4ff10
SHA1

c22adb2d9f7b44eb981470764190198c939a2dfd
SHA256

530a469cb251094a54943ac2a2b5b3d4ff4466580788ec8beedd40fb4edbb3bf
SHA512

80082a01401627633e45aeff708a01cf3462242751812b94fc41bba3f5d86d47ddc3a4bba20b3777aaa5e36d41e3a72c5823b66a4d9397db5910720c7d6143b0
SSDEEP

12288:nFv7xuWq5+8oXCa6vAm6AzPF3W8as5smuPwE8/ubnpNDdIhODYcUkX+y4S:FzvYoXgnzp3W8as5FzErpNDdqcX1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba1c3114b5a844c3b875a7b72eb4ff10_JaffaCakes118

Files

ba1c3114b5a844c3b875a7b72eb4ff10_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoServices

Sections

CODE
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ