159ab9c2860923e83a042eeeed52223e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159ab9c2860923e83a042eeeed52223e_JaffaCakes118
Size

196KB
MD5

159ab9c2860923e83a042eeeed52223e
SHA1

c86a15c3e000c16635d089076836424f0f54ce1f
SHA256

4d7fdefce0ad72517088759ba0fa9b2c757739f9803b5a7f003931b312221c0f
SHA512

378e3d8ba1cb60a5f0013c74fc2fdecb12cc2c626e88a6501bbc189fe24fc475e2443aa2aa4c18868ddd986b229ee588cf21aa39b1f4cb9ea0927e56cdb9d6c8
SSDEEP

3072:d2UM7mpLSijXGdyiLBKShlNvLEOvLsTU3c3dkckIBTgN1vZXUIgxiL:YUDFSc2dNKCvvLxWkc3dkPIBkN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159ab9c2860923e83a042eeeed52223e_JaffaCakes118

Files

159ab9c2860923e83a042eeeed52223e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Fight
IEUHr
Penal
Steel
Train

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 391B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ