d1c58622fcd4ffe36e8d549880e43122_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1c58622fcd4ffe36e8d549880e43122_JaffaCakes118
Size

85KB
MD5

d1c58622fcd4ffe36e8d549880e43122
SHA1

ba299e52dd347b230baa2ed4d73dfd1a3d22c060
SHA256

990a5017edda054cb03d5144a1ca92742d8b632b7f3dd60fa6cf22c4d88172aa
SHA512

e1464cc31bb528f2ed2ada790bd2fbeddfbd0878dc5a4a197d791f3080b4ffd251dc139eab53ddb4b610e9e3a4d2dbdd0090a706859f4ddb0baa8872a560c1b4
SSDEEP

1536:IIuj8svfWjAZrWe1X1fEVluiy4km13j2REjn2ITqXtBjsV+iZh:3S8dAZrtGl+4k+Rnz+XtuV+iZh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1c58622fcd4ffe36e8d549880e43122_JaffaCakes118

Files

d1c58622fcd4ffe36e8d549880e43122_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

_CoreVersion
_MemoryManagerImport

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 257B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JCLDEBUG
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ