d0e0fb62819fbdb050dce1afb220173b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0e0fb62819fbdb050dce1afb220173b_JaffaCakes118
Size

100KB
MD5

d0e0fb62819fbdb050dce1afb220173b
SHA1

b4a0b376c92b8ae9aa74ff701d9737e2403dbdf0
SHA256

9e1a0134e4504b3a13949c06296098a6c3c9dab78a188dffb5c7f7a02ca0ea4f
SHA512

8b219d6ccd7364ef57263592e847642c3f295fe57100b2b020c56495a702bebbb12720ccf97f2f07e25b4cd6de3d05a01bc806bb0f8d713d1b515e73a2e64358
SSDEEP

1536:JX3djEt0UeRKZJbOihTgRMWRDqF8HC3zITcqS2euR566xTrDl+:JHdjE7eQnbO0TzmDti3zhqSRuq6Jl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0e0fb62819fbdb050dce1afb220173b_JaffaCakes118

Files

d0e0fb62819fbdb050dce1afb220173b_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

_CoreVersion
_MemoryManagerImport

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 329B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JCLDEBUG
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ