dd3160bea159e6f2fb2502bb38c8fee3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd3160bea159e6f2fb2502bb38c8fee3_JaffaCakes118
Size

171KB
MD5

dd3160bea159e6f2fb2502bb38c8fee3
SHA1

f29afc8e4203bd3ea8a6a48b0909d47cd28dbdeb
SHA256

3cbd2e7ca5622fda2f1c9686dfbca1d094f982c121dbc7cc122e6320197504c7
SHA512

2521c66db4b63ff5a3d4eaa2866a1ae2a16401de9528f92d7a0ec58543797bf4d9e125838317e76b3ab28b40e26ff189e52eee26dbad07c006707f3761d7eaa9
SSDEEP

3072:0Srhw9w/d+EpfLAFOkQpSAUH0ySbzmZrXY96v1wgFTNLP3kLSBJHIhTBfwwGniuV:0ehXB7kQfMvNQLThTBYBiRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3160bea159e6f2fb2502bb38c8fee3_JaffaCakes118

Files

dd3160bea159e6f2fb2502bb38c8fee3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ