fdd9abd1048ed6a377e6d078300dfe7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdd9abd1048ed6a377e6d078300dfe7d_JaffaCakes118
Size

23KB
MD5

fdd9abd1048ed6a377e6d078300dfe7d
SHA1

f3ed7fbff952c1a94411acec55cad5e89b22272a
SHA256

911e568f133a81b07c5c3dbe92e5ee6655f05fd801de06a273d401ab2e0ac8de
SHA512

3c84af3f55d3868878bf4c2604f9976e4e75fef726bdb2756589c38866e574f98d9a8d762fbe1b7c45c7616885246fedf0b7e46a392af3d70d01b234ef581e44
SSDEEP

384:trvXHvbUnnsOIqr/ycs+lVWTUR75c0RQm90+sT1doTiDnnnN4nnnf50xiMRnnKKd:tnUsWx0w5niAxiD+Kt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdd9abd1048ed6a377e6d078300dfe7d_JaffaCakes118

Files

fdd9abd1048ed6a377e6d078300dfe7d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ