cde425f517c6ca1f295ff2f60277c906_JaffaCakes118 | Triage

Sharing

General

Target

cde425f517c6ca1f295ff2f60277c906_JaffaCakes118
Size

45KB
MD5

cde425f517c6ca1f295ff2f60277c906
SHA1

43a14212a97906311a615f53aa5761f5250523b4
SHA256

408f85a18d3b0cfbc09a4399b276d7d40b9b17cda82f3fd8eac4c2eea9d20087
SHA512

dad1ae5672db432f71b8d5f6d321548db73fbbe40c53af4b80701e2664b49df8a577f6860c98c06bdb75fb39bd44b6529b73baaed32b67054780efd187b260d9
SSDEEP

768:XhCTqBQgwVQXGa33w2Qpu6oTR097P7pRNqbiK9g/s0a9D4WcCBjHAy8xN:4TqBQrQ5Q2Uu5RCDYVTcCBjHgxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cde425f517c6ca1f295ff2f60277c906_JaffaCakes118

Files

cde425f517c6ca1f295ff2f60277c906_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

syndos
udpdos

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ