f022127092b8bc20c6ca25f6150d42a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f022127092b8bc20c6ca25f6150d42a3_JaffaCakes118
Size

188KB
MD5

f022127092b8bc20c6ca25f6150d42a3
SHA1

bf032956542097b3e4336b0a8e2b0f6b9cb26b5a
SHA256

97f3a8b795f91475c5e36233901235ecbc2fbc372dd226429473bc0e2353e64b
SHA512

a8e0c4283367b97343b29b32530274601aeea2fa53f35115c0fee6debc9c8a14909e92797dc0351504b5d2a3407a0d81548b4b0b1b2f19dc933ccb891728e3f6
SSDEEP

3072:MJsz+fYbc3fFsB/uQpmRpfKGhkcPF5kGzXyAStbqjdYukY3lksWJ0phelCo5uIjT:MQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f022127092b8bc20c6ca25f6150d42a3_JaffaCakes118

Files

f022127092b8bc20c6ca25f6150d42a3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e7f0590d3ed4c680e7f66b95abb85d04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr71

free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit

Sections

.text
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ