2f4e9f8bb7821d3d0a5a4da9f49fe09a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4e9f8bb7821d3d0a5a4da9f49fe09a_JaffaCakes118
Size

925KB
MD5

2f4e9f8bb7821d3d0a5a4da9f49fe09a
SHA1

eb4885db2a69139737379702a59b075f6bf8c6f5
SHA256

63417b54600f282ca934f02a3ea225c458885f85bbcfb30614ee1c03308eee46
SHA512

dac766c5004a79a388f508a0242de058a7fdd86e3c56f4608c71d1cc93e85531903aa57fe1bc118ee1302bc7463e89b72e0cceeeea0b763a9af45c1670a99f0b
SSDEEP

12288:qpN716e90xn0jxvtCbqR/xwcRvIodj+DhMlskrpDvA2pzMh4/unEIZUlxOnY7a+Z:qpB1n9xvtlVxwcG1DqlNtpzMsdIKxQXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4e9f8bb7821d3d0a5a4da9f49fe09a_JaffaCakes118

Files

2f4e9f8bb7821d3d0a5a4da9f49fe09a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

toBervices

Sections

CODE
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ