cef4b5138fbecde1a4a3273dee101309_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef4b5138fbecde1a4a3273dee101309_JaffaCakes118
Size

63KB
MD5

cef4b5138fbecde1a4a3273dee101309
SHA1

a5e6013b57736e4b98c6951d8b911113efc33e30
SHA256

4d7081819e527e295d4beab836fb7e489f7cd97fe3e8882e65dc55563397a4e3
SHA512

6824039291c6eb3896e3583a6fa36eed2f0a16d6c08c7c727d1ecd2c792bd57baa15862dfd886e90eaa2628d70d3b4e1408d534b7569338f1e38611e916265d3
SSDEEP

1536:Hzq1LHQVWVFZtOBGQP/2qIPeuV5VLzc2106xw:07uWH/h/rz91rxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef4b5138fbecde1a4a3273dee101309_JaffaCakes118

Files

cef4b5138fbecde1a4a3273dee101309_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateObject

Sections

CODE
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WOSHISHE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: 512B - Virtual size: 178B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ