ce8aab1f246bff821e56a09277081f12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce8aab1f246bff821e56a09277081f12_JaffaCakes118
Size

751KB
MD5

ce8aab1f246bff821e56a09277081f12
SHA1

3890a326c69c815ad7e721957f8193cc8b7323dc
SHA256

8c265f9cece0d880969426f424aef6d380ee523f849f0158ec2c25c7fc69253e
SHA512

27e7fd6d80e5174d380d6b73f08de74517bd7af7d0a9b75731679b4a02a1d60dcab9d327a510b54d22c057cdf47db1b984f4ce7bd393e196f7f198c29651d44e
SSDEEP

12288:sEF94wuX9q3o1vSbTH6rMEiATjbhtPzXTwnk1cQ47g6ckpPWUrQQVurP6lXuiw11:sE3oXw3oEkZZbsNd1VWZlEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce8aab1f246bff821e56a09277081f12_JaffaCakes118

Files

ce8aab1f246bff821e56a09277081f12_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CheckReturnOk
MessageHandles

Sections

CODE
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ