bb6ff68fc15b7b6b1be4d2fbdb30f8fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb6ff68fc15b7b6b1be4d2fbdb30f8fb_JaffaCakes118
Size

148KB
MD5

bb6ff68fc15b7b6b1be4d2fbdb30f8fb
SHA1

f59d88fbe99338230e9df09afe93873c16ca5274
SHA256

c8e4681b13c5f831af1f0a399585dc13e47188b3dc532183830cf8e10a4e8293
SHA512

cd703522d09ca48a1562df20194db5a866b0b9d865f94ec22178a32ef1489bba0201ef69ab8d038ab8fbb1c9804f4a9fa4f7a9be6a8eee61fb64ecfb90fc1c98
SSDEEP

3072:Tf/oN9MV3l99w8tKxnzbMBnGQemhHgrTBf+at5rPFEZum6:TfwXMd0xnzbMBnGQ9HeTBm25rFEZum6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb6ff68fc15b7b6b1be4d2fbdb30f8fb_JaffaCakes118

Files

bb6ff68fc15b7b6b1be4d2fbdb30f8fb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllGetClassObject
EventStartup

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.newIID
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE