2772f2dbecbf9aed057c0ad9e7dc0d50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2772f2dbecbf9aed057c0ad9e7dc0d50_JaffaCakes118
Size

410KB
MD5

2772f2dbecbf9aed057c0ad9e7dc0d50
SHA1

e87b71708152a3fb4a2a645d442b43f9970d4eea
SHA256

b0514f8039a6babe5f7f6b4e4512a2669341b314fc5c7f342aa9c2aadb4dfb91
SHA512

0b4ed7ee288cd419d14fcbfa1cb1352d72ef44f776a0947f8721204b7d82bb8236f95e2a23a3e11f5535ae5cb0ca66b8c2649e919035c8b7c51b0ddf8cb66bc3
SSDEEP

6144:j2uWM/9RkONBh1eNf1EqAw0eXDVgefaeaxnQOHWdD/Im7CTqLa5GjPGVst:FWm9xNIyLux9axQOqD/t9LasqSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2772f2dbecbf9aed057c0ad9e7dc0d50_JaffaCakes118

Files

2772f2dbecbf9aed057c0ad9e7dc0d50_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateSubjectCertList
GetKeyType
HashPassword
SaveContextAlloc

Sections

CODE
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ