ef714bdfa7f07f3cc2443ddb2bb29902_JaffaCakes118 | Triage

Sharing

General

Target

ef714bdfa7f07f3cc2443ddb2bb29902_JaffaCakes118
Size

78KB
MD5

ef714bdfa7f07f3cc2443ddb2bb29902
SHA1

308c8745eb97afa5ffd4dfbb348b6837d3a6c423
SHA256

2df7b0864739fbb4d8d7860a9f40a63d43682527293b79007e937c70509108a7
SHA512

a9de68cbb34ebbc9861e0cc6e7c404c0da748bbf9743dea95650e178d7da80720f95d33fd8b74cb23bb5b12afd51294f49e19b5c0fc9218d6b32ba9f6a2f23f8
SSDEEP

1536:lksmsapPV5kvAwrF5MxXYVwEvIVTPCrBGJ3s+7hAKxHK1xUD:msmsaprkYwrF5MpYVfWPQw2K8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef714bdfa7f07f3cc2443ddb2bb29902_JaffaCakes118

Files

ef714bdfa7f07f3cc2443ddb2bb29902_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ