2efe25eeca19a7f386f1a500905b96d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2efe25eeca19a7f386f1a500905b96d6_JaffaCakes118
Size

23KB
MD5

2efe25eeca19a7f386f1a500905b96d6
SHA1

894d245ebb2fa95c55f1382a811c346560869327
SHA256

19dda52a954438df9dd9eaff1a0e40f33e77721e2ebee9e1f7c0bf033cb47b93
SHA512

a883e851bf195c2affd1793a4e57a7d53ea4af7081ce0c390b41a8c50dfd3a3daa84bd4d88af32420a30038c373ce3509f909365fb138e56403a18be13d8a0b6
SSDEEP

384:sYbVaDj/BCTnHh/hhg/IKm0mri9UbZRzqMbnkLjhw+79NXlpjmn6npQtSeRA:s6an/BCTnHcsri9Ubz/7kL1xyn6nre

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2efe25eeca19a7f386f1a500905b96d6_JaffaCakes118

Files

2efe25eeca19a7f386f1a500905b96d6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

TransSimonial

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ