ef2114aab38508e581e446d52f0c8aec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef2114aab38508e581e446d52f0c8aec_JaffaCakes118
Size

217KB
MD5

ef2114aab38508e581e446d52f0c8aec
SHA1

e916e95925a7b825e00f75a4ca8d9308236ed4a4
SHA256

433bbedae1766ae1f571b96316ee6524bcccb1f3d0fea172795de12740c17b42
SHA512

734755ceaaa7e3485098cf245a845cb2bf3def658dd0c615792b27cfae572b3ca099a295d0a57951ecf2569c3f55577d55185943cd9d6bf4a0f0d0fefdfff156
SSDEEP

6144:4oyyaBaGzDE9w8WBiRauojDmzWLf6633S8:4oTa9gWBKPo+zWLnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef2114aab38508e581e446d52f0c8aec_JaffaCakes118

Files

ef2114aab38508e581e446d52f0c8aec_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\p4\sonic3\release\Vegas\8.0\bin\Sony.Vegas.NetRender.pdb

Sections

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ