fca11246d73a0e86968ccb13f86fd88f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca11246d73a0e86968ccb13f86fd88f_JaffaCakes118
Size

38KB
MD5

fca11246d73a0e86968ccb13f86fd88f
SHA1

135c42509aa6c9ed03fbcf75eb4ca14f506969ab
SHA256

10a64a5790d1a8f54b995786a6555987246de8b4e7d745b0da1e3c014fb8481b
SHA512

8922cfb134d2f8c9d1640970a29079be73b1982937c50d1368b3330755dffd23ed7691946248dd685a50d61536ee1d0463132185d68be32e135c00e53e88f342
SSDEEP

768:4yIq8AQhEe+op7IUCEgIZNqxafCsKMVaxcj5dXJ:vIq8AQh8jUCEg8kafCsJkmRJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca11246d73a0e86968ccb13f86fd88f_JaffaCakes118

Files

fca11246d73a0e86968ccb13f86fd88f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

c1
c2

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ