dbb879d9a9ea87511f2efc5b6b228260_JaffaCakes118 | Triage

Sharing

General

Target

dbb879d9a9ea87511f2efc5b6b228260_JaffaCakes118
Size

732KB
MD5

dbb879d9a9ea87511f2efc5b6b228260
SHA1

a6c5a9b701cdcc95f7f7918bb8fe5f25196d0e10
SHA256

121351d22a0c1dc9d6f978d0ed1d1eed020939f968efe54c101a175b9eb6dfa4
SHA512

39470741fde073e429a990e5090cc14d028f5026d1419612ae0dbc3a5e68486adb76795f991d65294d255187d14d15f50499ee75e08e31aabb6370fd48a40e3e
SSDEEP

12288:AIiVURjTOOiendUdwupTc89cTmsdfHguGYc1oQasbWU+BiJpuHp3e8:EqRfkenMYtgSQNWU+BiJ29e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb879d9a9ea87511f2efc5b6b228260_JaffaCakes118

Files

dbb879d9a9ea87511f2efc5b6b228260_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ