da092df22c7480c6c411b03649bc14aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da092df22c7480c6c411b03649bc14aa_JaffaCakes118
Size

173KB
MD5

da092df22c7480c6c411b03649bc14aa
SHA1

9bb7831dfaeb9f5b3b37e4d5a2c04e34e383f5ae
SHA256

9aa75a659e38920904e92aa4ba9d6ce2d98b3d8b1e407d6e7711317dd12aeebf
SHA512

38bcce92ea07c262151d274cb57fa60cb6ee6718173c5c691bcd8cdb2fa2be8768f53ca4127a21cf83b530c5298ce128337c25527ec7f80644f1952e3363130d
SSDEEP

3072:w2XnaxDAyhV1dbGF1bxLU4duYRLMT/s6QpvlJdN6qL/ot2xIATKPj1WR7yajh:BX4F/d6HGERRgoJKPj1Wh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da092df22c7480c6c411b03649bc14aa_JaffaCakes118

Files

da092df22c7480c6c411b03649bc14aa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

alexaFaBao

Sections

CODE
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ