dcafbe0b3f9b3ec485c6e2831fa1cea0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcafbe0b3f9b3ec485c6e2831fa1cea0_JaffaCakes118
Size

178KB
MD5

dcafbe0b3f9b3ec485c6e2831fa1cea0
SHA1

f4d6851319f6b6acb97ec94ccaf52cc818e525f1
SHA256

0d439c0f49f823f793013566cdcb3135a5e539e115c0251ead46487a4d37d06c
SHA512

75e26461c929e3ccc0193347acf48c482d45143f049e3e2220fffb0ea24e81171ab8a21e3c796329239b1a14c4e56f57c406c007a453552b47016917fd249651
SSDEEP

3072:C2XnaxDAyhV1dbGF1bxLU4duYRLMT/s6QpvlJdN6/vHebvW9+sxcm5FEfFtTyazQ:HX4F/d6HGERYv+bvW8AcSFEfFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcafbe0b3f9b3ec485c6e2831fa1cea0_JaffaCakes118

Files

dcafbe0b3f9b3ec485c6e2831fa1cea0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

alexaFaBao

Sections

CODE
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ