bda2877aac1c72000c610d961bc417a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bda2877aac1c72000c610d961bc417a9_JaffaCakes118
Size

64KB
MD5

bda2877aac1c72000c610d961bc417a9
SHA1

640fe11a8ea3789552f90d8a94ed7b98cb468a4b
SHA256

c6dbd88b7a7de2379e650a9df43c7f19224ea07de51f8d4c529e4762b513124f
SHA512

1e4d97a8551cab22531b3c0e2c184218f22808f5c8897cbfe7025c3279a974469808c6a814f160874cfbd9bd064d99a76f3bcc4492d72bfec2d3701daab5f802
SSDEEP

768:jJ3YaqOcQGlYJtIEWwm8flirWThnoPSrsTVEl6Lrn8FH6GeAcy2TrJ80OCUZ4brV:pvqDQGAmFMlirWTWB8fArJ8x8m+h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda2877aac1c72000c610d961bc417a9_JaffaCakes118

Files

bda2877aac1c72000c610d961bc417a9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllMain
Dllrun
DownloadFile
InstallDll
UpdateDll

Sections

CODE
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ