0647dc0ab951ad20c1ed6e633b63943d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0647dc0ab951ad20c1ed6e633b63943d_JaffaCakes118
Size

881KB
MD5

0647dc0ab951ad20c1ed6e633b63943d
SHA1

5bb30853e2d8632f2bd6a4854abc9bac6bde8ae2
SHA256

f788f83459a4d6b13f9a3c9939b4951e6e12dc397ceb3fcd9876b95d007da6c5
SHA512

0308ce5ce23a1c1ccd8c9ccdc1c7df38bcd6efa2e5a7b7038bd58ee73bbc5185726f8c036426cf8627066d814c8f50a929f761c3d3b64133b06b8e1a6d07623f
SSDEEP

24576:25MhSeIm2E/sshXM5bqaiaTNYayqBAC59PnhDgk31:nDIw1mVYQZ9Okl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0647dc0ab951ad20c1ed6e633b63943d_JaffaCakes118

Files

0647dc0ab951ad20c1ed6e633b63943d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoeServices

Sections

CODE
Size: 739KB - Virtual size: 739KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ