3db6bb6e102f44db680e04fd805bf657_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3db6bb6e102f44db680e04fd805bf657_JaffaCakes118
Size

193KB
MD5

3db6bb6e102f44db680e04fd805bf657
SHA1

575ca9abe5c1d5b1602cdeb53da9816fbde19b9d
SHA256

1ec18fd2bec46154169bffe85a46b14d0f2560a0ce25d5375438dbe78371c4ad
SHA512

4c749f8cb6ac4a795cc383583f36b71258a6283ac703e088a3557faf6ab35498d86c5782709ee0907a477fb18e7f6ace72984c31bca823cc10f9961274480a94
SSDEEP

3072:wknjKAcPKE7GjPRy5NgnZEAXo9QI37/mwYKlEYpa4cYxhZawyUv7lclQ/FFs:LIysGjPRXZEppZp5awyI7m+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db6bb6e102f44db680e04fd805bf657_JaffaCakes118

Files

3db6bb6e102f44db680e04fd805bf657_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

doset
helpme

Sections

CODE
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ