da0428a7212f70f60d91cc81a4e01ce4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da0428a7212f70f60d91cc81a4e01ce4_JaffaCakes118
Size

545KB
MD5

da0428a7212f70f60d91cc81a4e01ce4
SHA1

7b4df94fe652826cd9a2ae5fb71af9402ada400c
SHA256

5feec181f4ff7f77076dc15f05a2205fae85d95a89cead9a4b33af8afc830b49
SHA512

6b1e59998d076da26406e37f45fc002436fa5ee30d557f6797aa7a7bc5f5e530685faa1621129e8da89261acea36e74f5f272a1ff93897daaa8b34a22d42436e
SSDEEP

12288:YT6mluoY5HYTHj4v3jplHAtuB8wiu/u2bi14Nk:2FuHyj4fjjPukl/N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da0428a7212f70f60d91cc81a4e01ce4_JaffaCakes118

Files

da0428a7212f70f60d91cc81a4e01ce4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InitDevice

Sections

CODE
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ