de97eedc7c759fdb16d4419ebd5b6d56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de97eedc7c759fdb16d4419ebd5b6d56_JaffaCakes118
Size

21KB
MD5

de97eedc7c759fdb16d4419ebd5b6d56
SHA1

1a5eaf106cde90886dab99c11b93d7fc97aaad7c
SHA256

c23175242a9e2b525bc152219ed89bb5d92b97ffcd6d1bed19c3013c93b3c9f5
SHA512

ae45d16fbc9c2ca44df0f0302dd73882c46063053ccb728ff6cf762e73c21927773c94747c744e7128d2b1e840f32a615c2765c2f68265547f7e892176517fc9
SSDEEP

384:BbQPWzOEq+yiVtI89APVDt5Hcm/Aclk/f1CGC4niceci/1WBzcVZ:BbDI8ChLHcPc+/f1CGCmice0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de97eedc7c759fdb16d4419ebd5b6d56_JaffaCakes118

Files

de97eedc7c759fdb16d4419ebd5b6d56_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ