db62963935b86b0ddd82bcf9a27eca0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db62963935b86b0ddd82bcf9a27eca0e_JaffaCakes118
Size

777KB
MD5

db62963935b86b0ddd82bcf9a27eca0e
SHA1

a9ca3ac6b9dba3111066888bf22bef74b59d5d93
SHA256

b1bb227972c8930924dff3147f2db6ba66fb1f339162abcc1e60f98edd32c22d
SHA512

68d67e309794dcd4fe0ce042b4ffc91526a25c20ba17b6e4fa40edf7bca95d7677aeeb1d16dfca85caf95dd6583dc388d9409f0df27c7bdffe30ac8a20bbfc02
SSDEEP

12288:nFv7xuWq5+8oXCa6vAm6AzPF3W8as5smuPwE8/ubnpNDdIhODYcUkX+y4H:FzvYoXgnzp3W8as5FzErpNDdqcX10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db62963935b86b0ddd82bcf9a27eca0e_JaffaCakes118

Files

db62963935b86b0ddd82bcf9a27eca0e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoServices

Sections

CODE
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ