0a65a1fcf6b81b72189e16f2d36aacdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a65a1fcf6b81b72189e16f2d36aacdc_JaffaCakes118
Size

38KB
MD5

0a65a1fcf6b81b72189e16f2d36aacdc
SHA1

c754d8a624f0da6c3620572171d80ce67254d52c
SHA256

e99438e8dfe04ddcd81bf3efc89c73236d3f29cd48f7989ec5acdfceea3e1d18
SHA512

e871fd83487d84bbbf3a2011e828b4775dc2d22f7613d0a04a71c3b45b3639d775f6105dbe09520b391779d50914afaf5dfc23bc8624c8c5bfed6d05b2c96fc7
SSDEEP

768:TyIqvQBcdxDuPlDUK/rvFh1PhMHTlzvPM04VHisJWSDZj5Y9+U:GIqvQzUKD31J6tM04VHfvNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a65a1fcf6b81b72189e16f2d36aacdc_JaffaCakes118

Files

0a65a1fcf6b81b72189e16f2d36aacdc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

w1
w2

Sections

CODE
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ