ee874d6306082d8807b8d778538da001_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee874d6306082d8807b8d778538da001_JaffaCakes118
Size

746KB
MD5

ee874d6306082d8807b8d778538da001
SHA1

a5543f25857273f8a6517e6896e862ca49350c5e
SHA256

5fc1860cc6bf7169e004bdc0c948db57f31733b1b2b94fb46201b446080e850a
SHA512

f38505558d2f052bb2ed233905d46503e548aeb1e521f2dc6fed7d548817f982914b5df7c253806db1ee37e93f504f47456ab1fde43db839ffd97dcd2f3723a5
SSDEEP

12288:w9G9OGXzvn4OYEx21JF/JNpLdP82JfNgHosXwfVqz9/:w92vbvYk2J/55TlCsMp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee874d6306082d8807b8d778538da001_JaffaCakes118

Files

ee874d6306082d8807b8d778538da001_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet
CPlApplet

Sections

CODE
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ