cf1db2062270300cda8053a40ce5690a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf1db2062270300cda8053a40ce5690a_JaffaCakes118
Size

531KB
MD5

cf1db2062270300cda8053a40ce5690a
SHA1

8240e558106e43bb2a2d052c4cdf96cee053cfa0
SHA256

e59898071dd1ed97fb8453e6e041ef926927ecce221cb9117b252b36df6cee34
SHA512

d783c2833c2287599770ef54858c19a5bcb6c8c9c374d8d983bc5240fd0d27a5261552ed67e69982cc29c02dc6b2d56e701d4a357c1c09a0112417ec3eedd3f9
SSDEEP

12288:WUsXkeZjRlK0jdHtPWJYr9PfP60rlkxC0:HQ3lK05H1ptayl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf1db2062270300cda8053a40ce5690a_JaffaCakes118

Files

cf1db2062270300cda8053a40ce5690a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

init
main

Sections

CODE
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ