c91f9c31ed72f3f495207f3db05aafa7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c91f9c31ed72f3f495207f3db05aafa7_JaffaCakes118
Size

96KB
MD5

c91f9c31ed72f3f495207f3db05aafa7
SHA1

31b9c2dc80c439b7b739851d87980716f65981e7
SHA256

1f4e34dd660a7938c7d930c0afef46043eadc09f8091c614bc0ec36747c29e1e
SHA512

2a9cc4e3e4253c971327b955934d716e8e74b7d72fa0ea370cb15f70c6fbb0b128e0f3994b8cbb21815464b7d551c488b9c50b98ae3adde4bbcc773e4132baa1
SSDEEP

1536:Wgl8vAW3lfJQsTS5XSabyMzuDrAdCGPg8/psvv96NL:3moaJQsTSJSabyMzuDrAdC4gasvv96x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c91f9c31ed72f3f495207f3db05aafa7_JaffaCakes118

Files

c91f9c31ed72f3f495207f3db05aafa7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

RunFile

Sections

CODE
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ