d6b46ef3c0ccd50373b2678983ceed42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b46ef3c0ccd50373b2678983ceed42_JaffaCakes118
Size

456KB
MD5

d6b46ef3c0ccd50373b2678983ceed42
SHA1

3b9542a5920694970b0d04bbc40ff8b85966e03a
SHA256

ac543f1a1df5458500d764a4251a94e5b66977d98677efb9e95fa20148acae98
SHA512

1a63cb3e1fd2f250ffdb3f17a859bfc7cbe0452b8413cc0c23927f2038b16e018fe11e5005af22a76d2727aa38cda0f304a111bfb0278782691f88ec2766877f
SSDEEP

6144:wUA4FqFK5j8DSETKujSdzxGs3oa4+8am5gBIU+mfMPQ43/AAwziErOZI9zMJBCJf:I4FDmDSET5oltV4mfMTUiMOkoIfrU5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b46ef3c0ccd50373b2678983ceed42_JaffaCakes118

Files

d6b46ef3c0ccd50373b2678983ceed42_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

_getImagemCapturadaWebCam

Sections

CODE
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ