e19c3a175aefe9035b7398b865c17baf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e19c3a175aefe9035b7398b865c17baf_JaffaCakes118
Size

19KB
MD5

e19c3a175aefe9035b7398b865c17baf
SHA1

44180651f38e5db2eaa57fe0eaf43cc5d96d1f2f
SHA256

e5b4a13276c683850bc7752fe9722f7a45f57654d892448b77571c9766c89971
SHA512

b7675921ff7ef32ab934a95c33a67b37179674fcf100170658c19ea97e4c6ce3b7bbe8ea75aa30bde36b6d406d64f0eeceb95341d6b07228fe678f477f947741
SSDEEP

384:qg41mcxTFS6dDMNyI9Xm3a7xC+PFqA3OaKgTDiG8BljzW8iwLWPJpb:amcxT/gF923aMUltT5iBZiw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e19c3a175aefe9035b7398b865c17baf_JaffaCakes118

Files

e19c3a175aefe9035b7398b865c17baf_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.NewIT
Size: 512B - Virtual size: 128B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE