ebbcf05146f15cd621f89401ddf94084_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebbcf05146f15cd621f89401ddf94084_JaffaCakes118
Size

97KB
MD5

ebbcf05146f15cd621f89401ddf94084
SHA1

e4523a268e208659ab86f6af47b65ec4120e7c88
SHA256

1c53861cfbc85abff49153b266dab60e88f4943f3fc32abc43c0773c3856f72a
SHA512

62de8116c562a370c9dfff5ae44ca3d4ee0b9267f191c29016047207092f8ee07d91ae3713e027e85bc10047e1dc077f657d571afee03f4604e3e23ae402b57b
SSDEEP

3072:mW81bDAMU1txOiXsVL82Q1qPZNOwaTlT1y:WbRU3kiX6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebbcf05146f15cd621f89401ddf94084_JaffaCakes118

Files

ebbcf05146f15cd621f89401ddf94084_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartH
StopH

Sections

CODE
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 83B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ