df192753d0d4ce2500f3c32e5cd05bc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df192753d0d4ce2500f3c32e5cd05bc1_JaffaCakes118
Size

241KB
MD5

df192753d0d4ce2500f3c32e5cd05bc1
SHA1

823a5528afba572fde6d4c2e74e9b3f228724f75
SHA256

95e27391765e526fc3258047ca7c4765cd94521325f8ca2ecb8ec61666dcdf74
SHA512

24cf0cc005d4cd7bdeeca4b37479359fe9235803573fb28b1dca7d5b5e4b4095a811434aee13ce816bd2b42a1701d01bc56d6ca90d48af977bb56bcf10863641
SSDEEP

3072:FWZzMrqdtkHxqYCrQNSH1X4vsNI/OpYqFvVWfaaDvdhoyyFCFbAYMcI44iPThpm7:gmnfCi2FMHFtyFgFm3P9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df192753d0d4ce2500f3c32e5cd05bc1_JaffaCakes118

Files

df192753d0d4ce2500f3c32e5cd05bc1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ