d154742a1115fee43fccc7f2529bb952_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d154742a1115fee43fccc7f2529bb952_JaffaCakes118
Size

29KB
MD5

d154742a1115fee43fccc7f2529bb952
SHA1

e590eafaa3858bb420283fb1bab5f988bf368ca0
SHA256

2bbba1d3eac5789c69c6a49bc9a43437dd91a04bcec5a168b122bd695d3589c3
SHA512

8b071314e30e79251e380bb09906b35d816bc978a468dbcf1df7b9aaa0afa1a8227b39935eb1d0815ce1f01225a94bb3d5f8a258ed75bfadb7c408d2bd1a3f77
SSDEEP

384:55yuzmk3ySFy81TvV5OFP9X30WkOAYoMVTz+QrtJFGJj6pl87B+1a1t1dL1Pz15u:NM81TvV5gZ30WocL5JFGqGTQpLsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d154742a1115fee43fccc7f2529bb952_JaffaCakes118

Files

d154742a1115fee43fccc7f2529bb952_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

zyd16

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ