038008f95fc9e0f1e88024a0159f106e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038008f95fc9e0f1e88024a0159f106e_JaffaCakes118
Size

614KB
MD5

038008f95fc9e0f1e88024a0159f106e
SHA1

43761b133a9440d39bfe0d522b67e37135d59efa
SHA256

7edf576a27ac427af8d874a1022d3ea959b16b19224507dc0d20847fee21962f
SHA512

9566e3b0ef4caa366dbaae81f7fc64ead344f4b7d71e5dab33ca64f21120b4725ccf0d4c0ccae5f78f9901ffa4ed94cb739899d46c441fe14586c636aa30e338
SSDEEP

12288:zgJ8S11K0xJJxkQfsuNBg4GAYh3JFLUzTtPYP2W:zS9zO8MLZFAzTRaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038008f95fc9e0f1e88024a0159f106e_JaffaCakes118

Files

038008f95fc9e0f1e88024a0159f106e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AdjustToken

Sections

CODE
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ