c170c0a1f9e7763943603ee12bc71aef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c170c0a1f9e7763943603ee12bc71aef_JaffaCakes118
Size

345KB
MD5

c170c0a1f9e7763943603ee12bc71aef
SHA1

91cf194100961997ac7fff117cad5c32ef297179
SHA256

db39718592081b81d63f672e073f38d902b6eafad81da8d225673aafacbeb338
SHA512

9303540691023f14ef9787664bb289f20bda245e489961fed7bf672ac126d385e56d3740294725599256610b178666cac5714563765a914f11f38301a558775b
SSDEEP

6144:RpXN1X6VjHqm4Rt1vUklRdokwvlCPL+sDLvnmDqM:RxX6BHSRLvvdoh9EqsDLnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c170c0a1f9e7763943603ee12bc71aef_JaffaCakes118

Files

c170c0a1f9e7763943603ee12bc71aef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

newman

Sections

CODE
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ