08145a7ad24750205f4c488bac4eff69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08145a7ad24750205f4c488bac4eff69_JaffaCakes118
Size

338KB
MD5

08145a7ad24750205f4c488bac4eff69
SHA1

cc3c71ed108bf49ec320b9712fa6506d951214ae
SHA256

df174d38500e364ea0e1cffa220a3c6a78bbbdad0fc446e441b5e47340cb3a89
SHA512

2b03a563716a1da17149f9f890ddc7bb0f01cfd2fb2233126a7156e5fc2f294fce75ed7e7e0ababbd173c89c364a87fdd36b656751aa1e9b03e013d19e66faa7
SSDEEP

6144:wHhKstnI8HIhpGWOXGE5L0U7HTCO9BouIFEA1yr3ahZtpq9p2aXfrPNaJi+T:EtRHyGWSR0wl9BeIahr5I7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DSC0402805.cpl

Files

08145a7ad24750205f4c488bac4eff69_JaffaCakes118
.zip
DSC0402805.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 572KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ