3840f79bbb82fb8f7e669451f4262f3c_JaffaCakes118 | Triage

Sharing

General

Target

3840f79bbb82fb8f7e669451f4262f3c_JaffaCakes118
Size

200KB
MD5

3840f79bbb82fb8f7e669451f4262f3c
SHA1

d531fe72c07caf7857be2a88714bceec7f7ecf17
SHA256

aea4bf7cb766208dfbd940420a8184f14783e0be650bef5c92b446e7cf6d0ddf
SHA512

f520b66449e424bf2d9c5ae3f74c5e4a46544bf325b7c750114d1555823e3e0ba53c107dd6c08796c467ca672d1c383ae5050ede80d30a455213f85ac43697bf
SSDEEP

3072:9rfazcyY5LGxEwTGboT9znimpu42qk5xckZzsc+epvGVAifzf898XBjKj+RMbNDZ:9jyYpjwjTNdu42LDckZrrOTvEUzUCWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3840f79bbb82fb8f7e669451f4262f3c_JaffaCakes118

Files

3840f79bbb82fb8f7e669451f4262f3c_JaffaCakes118
.dll windows:7 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

3Kgkf
Addle
Fake
Sees

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ