e158e4dfee1bebb851d695bfaa61ce6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e158e4dfee1bebb851d695bfaa61ce6c_JaffaCakes118
Size

81KB
MD5

e158e4dfee1bebb851d695bfaa61ce6c
SHA1

0d441180f2e8dc725ebcb927bd58f27534a238a7
SHA256

887d4a8147f0fe28cfbca0cae32648652fcf93651c686938170f8bae47faf6b7
SHA512

11dbbc651135813f09e5f46f4f4d58fff6bba26fb37b5fe94b4349bb8c6d389bff60ab09f782501b97ffe3e0563aa2bdd93ffb6faaa0180cdcdcb9048e6648b8
SSDEEP

1536:caxwjSaE5K9BGevJqvmYuLdigQAs3yr/J/N0fksk8vwSqrH3XL:cG4SN5gLymEgE3GJck8vwSqrXX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e158e4dfee1bebb851d695bfaa61ce6c_JaffaCakes118

Files

e158e4dfee1bebb851d695bfaa61ce6c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Keep_Live
Recv_Callback
Send_Callback

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ