c7831edf319724146fd8d894e29ce965_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7831edf319724146fd8d894e29ce965_JaffaCakes118
Size

52KB
MD5

c7831edf319724146fd8d894e29ce965
SHA1

c86ad699c6f1ebcbbc4116be5de47734fcd8add3
SHA256

2c498f49c010be1b58981440fb785b3bb5c2032cf5fdb90493c3f6a8a4024a84
SHA512

5223127b7fc4806df9f1ae6febac3f8012f920e3dfd6338bca2c8f1b80568e1ac5bf8a3ec2c88c2f7ebd2c9b1bce32beb27fcf0b5bbde568269e54fbdb704bf4
SSDEEP

768:v8Ij0Em0e8RhXtFPkhVqUiN/eDE/IT5K+oA3bShCs/bJ0zemZUyxNpqB:v8Ij0keyOeUiNa5KhcO8sTJ0a6vxzqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7831edf319724146fd8d894e29ce965_JaffaCakes118

Files

c7831edf319724146fd8d894e29ce965_JaffaCakes118
.dll windows:28418 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

MaSBukHWA
KeWlsHDBYj
FjCVMsQQ
RLJTSlZPFt
PvPTPC
NYQlFH
xTQSSf
McHHcfRAgJ
ZPWaz

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ