01b0cabc71722a4715393f8cc7ae6a3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01b0cabc71722a4715393f8cc7ae6a3d_JaffaCakes118
Size

777KB
MD5

01b0cabc71722a4715393f8cc7ae6a3d
SHA1

8ff8ca99df777de3f67950e02b9a842d7ad3eeb0
SHA256

d7f9e2fbedb57d8b3c908092a8ec08a4039c8b434c4acf0eb77429515c7e77d1
SHA512

a35990ee5d53057a2cdd2948b3b1e89d8ea1a871ca01ae1e65b68c0a7e46385209440405c7ce19cf00e808a78956e0c4038e1b78594c05fcb70c8b9a8a052233
SSDEEP

12288:nFv7xuWq5+8oXCa6vAm6AzPF3W8as5smuPwE8/ubnpNDdIhODYcUkX+y4t:FzvYoXgnzp3W8as5FzErpNDdqcX1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b0cabc71722a4715393f8cc7ae6a3d_JaffaCakes118

Files

01b0cabc71722a4715393f8cc7ae6a3d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoServices

Sections

CODE
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ