ffd0f755e3a065a4d96ac3ab78892b17_JaffaCakes118 | Triage

Sharing

General

Target

ffd0f755e3a065a4d96ac3ab78892b17_JaffaCakes118
Size

63KB
MD5

ffd0f755e3a065a4d96ac3ab78892b17
SHA1

a450912dbdc14c948151d4a73ead842b5b0097c3
SHA256

e003eebbea2f5def5eb9fd58a0ea6f372889d6d9b1e2e641ec8841f1f5e07668
SHA512

85ea35079f1f1a41cb35d7791a4e370ace7f1363eeb189c8c68c0b649f4a7417ec1a3d6e5f765c7c108df8341817a69211f9d7dea0f3752d3ca76c085b5c466d
SSDEEP

1536:XB3/qeEQUsVkXyLxtF3wj6/32nQg1Pweef1LpEIjvsejjpTyr:R3/q8YXyLHuw2Qg1oewRpDvsejjUr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd0f755e3a065a4d96ac3ab78892b17_JaffaCakes118

Files

ffd0f755e3a065a4d96ac3ab78892b17_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ