eb83eb404292db2e719b4a5a08a37c03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb83eb404292db2e719b4a5a08a37c03_JaffaCakes118
Size

680KB
MD5

eb83eb404292db2e719b4a5a08a37c03
SHA1

7c16ebf37973b38fe9200ce8f725c7d7bbe73862
SHA256

43a43cbf23564654bad3dca4c9f380829b806901efda0dde9a3cc87eff72fe46
SHA512

b2639e7769868e8e64e9fe672fc33557549924fedae624eb4d5fe27981ca6e8222527a32c2d2ca21d74e181823c9e923094d9f74d7cdc9a36064bb9180b69b26
SSDEEP

12288:ojV1IoVcQFTQRW5AF/aFFr+lbYmHRO0jgxt2bWBpkknVUx5lsmXvWoki8XOwsodn:oRCAGRW5AFCn+1vUYgxt2iBpkkKdXvWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb83eb404292db2e719b4a5a08a37c03_JaffaCakes118

Files

eb83eb404292db2e719b4a5a08a37c03_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ