de123b8b891962513d82b928ca5f5a7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de123b8b891962513d82b928ca5f5a7f_JaffaCakes118
Size

268KB
MD5

de123b8b891962513d82b928ca5f5a7f
SHA1

b53513dc0e5da76006836674bbd123a09111a93f
SHA256

e754bf6e6c16203c1c4399571054b2bf959ebb8b9cb3f907b765cc10888e6cf7
SHA512

c0fb00388f33aba32ae34260c3886941fa45e01170474b73d942467b0c634fec8c054f7cbc7f8e43bcd2229feecf3910251e8787aedebb8577418d3b37d3973d
SSDEEP

6144:CBxxZ0jbSs9nSQjKbUk2QGBCMxk5R5+Tqf+Ug:CB9WSarpkrGgEQ5+Ts+Ug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de123b8b891962513d82b928ca5f5a7f_JaffaCakes118

Files

de123b8b891962513d82b928ca5f5a7f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

dospstats
dostats
dostatsall
dotrstats
initstats
setspeed
starthook
stophook

Sections

.textbss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 250KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 207B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 206B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ