eea02d025c01d3925c07afbfdf900a7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eea02d025c01d3925c07afbfdf900a7c_JaffaCakes118
Size

174KB
MD5

eea02d025c01d3925c07afbfdf900a7c
SHA1

c182c4b2311dd092f6c61d8db638c1a796e08004
SHA256

31d598e90aea9e147e75ca1b1de3e744abae6ff39d7b5f00cc4eab1aca2b8293
SHA512

de367ed8d5766bb9f8b4e917fceda860a511d9e023f9601dff4e55ca4a57f324cc01ed13c17c3a881f498bf0b8508e90127ae6f44c3f5408781c89a9b09f2e15
SSDEEP

3072:rnhG7Xtr7YNIMNGp6uy+MXlNwf831HWkXqzpA0mDYxnwr73iD:jhq9rn+q6uy+KlNwqHGA0mD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea02d025c01d3925c07afbfdf900a7c_JaffaCakes118

Files

eea02d025c01d3925c07afbfdf900a7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\gabpath_work\GabPath_full_code\code\projets\contextuel_popper\exe\src\URLComponentFF3\GPFF3Component\Release\GPFF3Component.pdb

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ