eba54ff5c43566a0a6dbd3cd52601389_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eba54ff5c43566a0a6dbd3cd52601389_JaffaCakes118
Size

34KB
MD5

eba54ff5c43566a0a6dbd3cd52601389
SHA1

c5084cf6570517d97c8cba6b75ea686a40ac82ad
SHA256

656563e26fa9cd805ddab4ce9dc41ebbeec2438b583682c054ad91ff9a3ba465
SHA512

18f08856276fa512da217831fe66654142bb9519223b808a8643f0a56c11562a1ef26054d27889fd8ca68542eec721019f39655ed44aa63616cc936303694841
SSDEEP

768:uBRV7Z7I4ik/+oBDb+5g4HLUODk2kuU3USS7sDvR0Z:iN7Ic+WbWg4HoOnxUEJse

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba54ff5c43566a0a6dbd3cd52601389_JaffaCakes118

Files

eba54ff5c43566a0a6dbd3cd52601389_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ