fb4ab30e802fcbd1d5f8e46abf5f9fa3_JaffaCakes118 | Triage

Sharing

General

Target

fb4ab30e802fcbd1d5f8e46abf5f9fa3_JaffaCakes118
Size

69KB
MD5

fb4ab30e802fcbd1d5f8e46abf5f9fa3
SHA1

a57cbef23d7dcd29b40d51ee7013dcca99462877
SHA256

3e50a6d5bf3fbc7555732e1635fcacdb8419946c3707be1d5d12afcb8e918876
SHA512

80fd70329f9df20cccb1ef5ecc8250ab263fc00f6db7d59c5faac3f4e284fd580a62a47d38b51cf234f49a7a2e423c507adb9c19d0f1279222323b6e8547dd18
SSDEEP

1536:bZwmVRvMMvDMh7OdiKMc54RACopSNmO7t/2udHKlAmN:bZKMvDM9OdiKMc2KpSkO7tOudHoAM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4ab30e802fcbd1d5f8e46abf5f9fa3_JaffaCakes118

Files

fb4ab30e802fcbd1d5f8e46abf5f9fa3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ