bb9b8703846a263deeece5e3477be8e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9b8703846a263deeece5e3477be8e3_JaffaCakes118
Size

105KB
MD5

bb9b8703846a263deeece5e3477be8e3
SHA1

d4f63ae14f6481e3dfc27e2eae667f4354439ee5
SHA256

8d8e365b9fce72e9011e337e31e09c6c45fde13a056a86700209d3721808ee97
SHA512

4d8c05fd0e1ad4765f580329ae453c4538f5b10d395ae402ba439c4a74ca27cf193e2b168edb3104e6253b2a383214d6892eb9197dbfcfd0fc2411c54febf577
SSDEEP

1536:LPZ3q7KYJQ/SB2KJU0w8OQ3uBS2+AWUrPYYtPCeOm+eW9UVyEqqA6ney:6JKSRULAESL5UrYYtPvOm+eOxy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9b8703846a263deeece5e3477be8e3_JaffaCakes118

Files

bb9b8703846a263deeece5e3477be8e3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Start
Stop

Sections

CODE
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ