e1cb842c474ba2288cce94d0dbd86161_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1cb842c474ba2288cce94d0dbd86161_JaffaCakes118
Size

75KB
MD5

e1cb842c474ba2288cce94d0dbd86161
SHA1

53c8fee12d1fe2327a29f866895885dd153d8560
SHA256

fb011ef87d62b7b89d427b4935049b649c28dc4e89d9a060c87fa3dcf52c1834
SHA512

5fe777906d5e60d15cc753f006e05e160e5acae6ff011ee19901706e29854697d6f504136b50db166c2bc6ddd944977ffa3c5c513e2f8055eb519cf60027777d
SSDEEP

1536:KsWGHeLBAjdqPd0xnhBbgA6UBeiFT0EvQ/G7tsoPJuxVl1sculWaE:FWHokOVheHEYu7tTwl1sPlTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1cb842c474ba2288cce94d0dbd86161_JaffaCakes118

Files

e1cb842c474ba2288cce94d0dbd86161_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ