eee868d2ef5783d2402b0c395000a9be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eee868d2ef5783d2402b0c395000a9be_JaffaCakes118
Size

167KB
MD5

eee868d2ef5783d2402b0c395000a9be
SHA1

397cf5769e75e5c12e447c7923b0f7857128d76e
SHA256

96909d35258875fd36e9f15f60e07937a96d9fba49c828d0d437e18a0b1c51e5
SHA512

ccbcda8d802c3fe94f01b6288f4c654bac9bc87f765d51ef64b4d11aa199dec57301ae222987a3df4e64cda9f60e5652c6ac3d6138e7676d9f6b688869587097
SSDEEP

3072:7HkVb6UR1S4d9yl6dGgNRxZ2Tfj6AkBIHkXujqt3+QnYbpo5r0aT6y:jUb6URXE+f7yr6AtaT5JnYbpgr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee868d2ef5783d2402b0c395000a9be_JaffaCakes118

Files

eee868d2ef5783d2402b0c395000a9be_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 209B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ