16cc5cf2905864367726ed1e1da8e876_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16cc5cf2905864367726ed1e1da8e876_JaffaCakes118
Size

23KB
MD5

16cc5cf2905864367726ed1e1da8e876
SHA1

027fa9298d37ab52f2331662c8cefa40cc9abae0
SHA256

3102200ee4774ed5cdfa436fffd2c9acea06e2e3e18758e8dfaac3361169444b
SHA512

ac65cea8e596281810f6861f82cfbc231a5abb1520f670e7667a4502ff0986c1db40aa1742a9fee1d6b90e3723cc83e968f1c2d40e82471dae56e366a8aa3e8d
SSDEEP

384:JP4dUf3gov/cXE7cOmxuAxobZBh5M7Y5rR6MCUlCx7vB:Jd3gov/cXE4Nx1x4ZBIIrs5iGv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16cc5cf2905864367726ed1e1da8e876_JaffaCakes118

Files

16cc5cf2905864367726ed1e1da8e876_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Rndxedr

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ