ef5f4cdfab89c8a69eb0653e6ec4f047_JaffaCakes118 | Triage

Sharing

General

Target

ef5f4cdfab89c8a69eb0653e6ec4f047_JaffaCakes118
Size

72KB
MD5

ef5f4cdfab89c8a69eb0653e6ec4f047
SHA1

ac1c50c2c2223404b5d2f3ac7ffaac5760b66990
SHA256

479187c23ef65fc053b567d31edc0e4947d36566224eb3cef3f748c50a5256c8
SHA512

0437a87795052ae9da44ed75494a6ca432201fece622b1a46d4c197bf57a0afe81f023f3b3e8505e484a88c5cf71c903779200ae36499860954011efe9811f12
SSDEEP

1536:ejjbjjeYSsgJIwSvdUyylpDDZCR9A7wqHnsY1WFbT+9Zg1Yb:4bjjnAJzSvJgDDwRG7wqHsY1WFbTY+G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef5f4cdfab89c8a69eb0653e6ec4f047_JaffaCakes118

Files

ef5f4cdfab89c8a69eb0653e6ec4f047_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ