e1eaab3ab5affcd508dfc121d0473405_JaffaCakes118 | Triage

Sharing

General

Target

e1eaab3ab5affcd508dfc121d0473405_JaffaCakes118
Size

19KB
MD5

e1eaab3ab5affcd508dfc121d0473405
SHA1

c748a180f4f076125b7095a69934913ffb124dcf
SHA256

2908b41209666dc3938e0e84b53e8c907158a41306fe91bbfd7f6dcd0f546512
SHA512

0e132714e3c5bea26232f70841582c070991dcb6cdc9e5287ac5750e40d2d2f8d48b700055d78a1b495138acdca5c6c248c31e8b2dfde9ba0deb9446d73b6bda
SSDEEP

384:fnZE24nDwyBtkQzEVeRa5tGJ3BXz8rMKIttj5ET:fnZVROxEUo5MtIrM7uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1eaab3ab5affcd508dfc121d0473405_JaffaCakes118

Files

e1eaab3ab5affcd508dfc121d0473405_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ