39aacd0d7452c3830ad64baad3be4039_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39aacd0d7452c3830ad64baad3be4039_JaffaCakes118
Size

358KB
MD5

39aacd0d7452c3830ad64baad3be4039
SHA1

c92172d501493f55a96782a524083e0510a4319c
SHA256

5c302150a54f030f741731b628da37a22f07e38935a18d1f9d992054555ce5fb
SHA512

aba79342bc331ce8d5fa85648155ecc51829732db66d8ad9234ec5c09fd1511f8ff56ae50cfe631018c453c03a50452e6785de3cfb2582868d14aa326dd04005
SSDEEP

6144:Y5zY2J5CmQFgJAvUkHbnfJHjMmY9DMH9UakiPq:AH5CmhevHfhn4DMHOapq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39aacd0d7452c3830ad64baad3be4039_JaffaCakes118

Files

39aacd0d7452c3830ad64baad3be4039_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

newman

Sections

CODE
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 136KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ