bc1665c83305cec927a632058fdebd95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc1665c83305cec927a632058fdebd95_JaffaCakes118
Size

45KB
MD5

bc1665c83305cec927a632058fdebd95
SHA1

d566395813ad673b25309ff4bbb6af7ac4c05e3c
SHA256

036645848e0ed9c8f9574ac5c56ab1400a0b2421a4fd18162e0a40e7e76f8cf7
SHA512

0678c7a3f9642c57f5f409fae8c3d445970c3c9ef34d153c9a0aa1de5a7c49c212465ed61cf61386efe6795ab9a2f9ff219a5c2e8ae98a18e10667bdaa2708ed
SSDEEP

768:dZ8qC8wna/SXoiXa9fhukvhS/tSAdn/6HnD6AY4ttmWJ2fObq8x:dgbuhunSWn/CDD/EWJHbzx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc1665c83305cec927a632058fdebd95_JaffaCakes118

Files

bc1665c83305cec927a632058fdebd95_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetDescription
InitCard
NotifyDllExit
ProcessGameData
SetPluginsWork

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ