eb281d0a625c6683a034f19859aa3d23_JaffaCakes118 | Triage

Sharing

General

Target

eb281d0a625c6683a034f19859aa3d23_JaffaCakes118
Size

34KB
MD5

eb281d0a625c6683a034f19859aa3d23
SHA1

22d6a1b3fb04695c7de275fe436e38f23358102f
SHA256

06a1d3001e7735246d1bb73b3eda7e5c6dcc9f35e933512b780f990d399a8f8f
SHA512

dc479f4e98b20d4aad743ce1620b3d27db660382ab50c63b0cd969a35df98ea67f69216de47a2ad44fd291d0f097f2c58898706899241597c51fe9e0330553f2
SSDEEP

384:24+VvqhrEEbNBuqsfT15OuWLsUFyTrSZhy9B+ItIkzP4CPWIyTUZSiyVXuaqKOOP:2pVvqBEEZBRqxnyyTwQj+YiZrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb281d0a625c6683a034f19859aa3d23_JaffaCakes118

Files

eb281d0a625c6683a034f19859aa3d23_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ