fd1febae1e708a9e3d1688a02cebd847_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd1febae1e708a9e3d1688a02cebd847_JaffaCakes118
Size

71KB
MD5

fd1febae1e708a9e3d1688a02cebd847
SHA1

483a022caf673cab118a4905497a54eff8804a73
SHA256

4c65310ee9bc25aeb00284e5df9172d0760b44ed545682c30df5d8536a0de9b4
SHA512

df791845ec15843f5a0cee9fc7320fdc137931612b079f2475122106ee4ca9b864de546da0599b214b5c6972bf3265970809ab45ca247d0a15c042c537e173aa
SSDEEP

768:ck5pisvuzgdwMG9hl7c1M5uEcnZ99AOtlDSp38MpMXTnkx+UZJnbkpHx4Bn4LZz:15plSbm1rtAOMMMpwD4nJnbhBn4l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd1febae1e708a9e3d1688a02cebd847_JaffaCakes118

Files

fd1febae1e708a9e3d1688a02cebd847_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ