de2cb5df2d39f025111f41cee9885cd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de2cb5df2d39f025111f41cee9885cd8_JaffaCakes118
Size

76KB
MD5

de2cb5df2d39f025111f41cee9885cd8
SHA1

56fd9edb8e61b050414b54f5323c4c447ce11c6c
SHA256

eddac20485584e35327a199ca4c17070422f9f63bd686200bb5d63a2dd448424
SHA512

a9f8548a60ca3b7eca9ad2c38bcce19ead1139d733fd25a1b9cf224ef1a8b1c05a54f6f9bafe3d251f4c23a35f77dc4b7065f9ff5ce591413e2dc6ae000fad0b
SSDEEP

1536:IJYtC0MuNFTF+HihOiNhM4RIvVpVaGo35wooVClvLk:jzlF+HiTLRIHo3OPCdA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de2cb5df2d39f025111f41cee9885cd8_JaffaCakes118

Files

de2cb5df2d39f025111f41cee9885cd8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ