07826030a5e672314cf30cdf8ddb191c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07826030a5e672314cf30cdf8ddb191c_JaffaCakes118
Size

98KB
MD5

07826030a5e672314cf30cdf8ddb191c
SHA1

68fb64d9000871bfb03ef4fd0d631c5bf55d0296
SHA256

bd3e2c72881c3568834ebf0cb8f4191e949bc6ca2a68656755207022e83271fa
SHA512

794faf0d8ce512ebca5aae58e8638442bcbe63962416f4c778f3ac43cc6659e5bd824d5ef32eeee96cd6aee3fb6f7e4165aab450f7b1d3454638b01b081f6918
SSDEEP

3072:CpvWU1x2e13Wf2cG72/FUygHLbC5EDDkF9+1XJQlYI:YeUjtSAjeg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07826030a5e672314cf30cdf8ddb191c_JaffaCakes118

Files

07826030a5e672314cf30cdf8ddb191c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

PlgDestroy
PlgGetAbout
PlgGetDirectLink
PlgGetOptions
PlgInit
PlgOnError

Sections

CODE
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ