d2c6812d145f1bfafb8c33bdcec393f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c6812d145f1bfafb8c33bdcec393f6_JaffaCakes118
Size

894KB
MD5

d2c6812d145f1bfafb8c33bdcec393f6
SHA1

2eba60624d5374ecf77a7f8344c9a16f38af8904
SHA256

7bc27485f7322de5908ddceb314018b5cd09c7d2a1791071868e460eed9b55be
SHA512

969a03b5d0b0f32d518c15e74799f5eb4988736b713e5abe5527fe64182913c44e5ee1c12aee0c6eaec6889cdc0c3189464b70ce32f05869038a5f80a112948e
SSDEEP

24576:RG9xztq9Gl7OW5ATiLIdeyfAy+abqhzcMP43u:Ax14tIyLWcm4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2c6812d145f1bfafb8c33bdcec393f6_JaffaCakes118

Files

d2c6812d145f1bfafb8c33bdcec393f6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ShowForm

Sections

CODE
Size: 757KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ