de9c29009d02bd5df13caa16e976cd43_JaffaCakes118 | Triage

Sharing

General

Target

de9c29009d02bd5df13caa16e976cd43_JaffaCakes118
Size

80KB
MD5

de9c29009d02bd5df13caa16e976cd43
SHA1

b208aa7dce0e406112a9c9a177b3fddb61409b3f
SHA256

4f00515081db1580eef1574a908218ee14495bd2b78dd0932982f22950d9d355
SHA512

369e5645a53885e2da912d4422b3aec3ad8761e8103424256f1feeb4e4e39cacb92103dcb43363d7761bac311d645ce8c32314fbfd1f110c1a343680f1fbc4d9
SSDEEP

1536:9zcIb5woBUjdgUtMsoES9gQ8HXDoe7HHZ+pY0UBTzXk:eE3DUtpHSzcD56Y0+zXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de9c29009d02bd5df13caa16e976cd43_JaffaCakes118

Files

de9c29009d02bd5df13caa16e976cd43_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ