de96cdaddda8c5cda103f2cdafd43651_JaffaCakes118 | Triage

Sharing

General

Target

de96cdaddda8c5cda103f2cdafd43651_JaffaCakes118
Size

865KB
MD5

de96cdaddda8c5cda103f2cdafd43651
SHA1

3c6d47a9a68e7cf4958ac9019c84cb95fa6a9381
SHA256

b4498d1bb77b51709e909abc3bc2861331a6de5023e825cda8b92b599e69c289
SHA512

cb27d70ba6dbadaa13036dc41018584a3fec4bfb25f81bb4d5c3de7d6f43969ef9e91a45e8c247b0f21613248b031e866ce660bc87916268b1a2f1127c8534fa
SSDEEP

24576:76OdZPmMauBz9qiO3f6221+L7usM/V46:76O3N9aidzsM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de96cdaddda8c5cda103f2cdafd43651_JaffaCakes118

Files

de96cdaddda8c5cda103f2cdafd43651_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ