41a3ab32f5b97ee31fdafd32a7f762cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41a3ab32f5b97ee31fdafd32a7f762cc_JaffaCakes118
Size

95KB
MD5

41a3ab32f5b97ee31fdafd32a7f762cc
SHA1

bdfda2d359bc6d329d9d8d30ba201c9a6ab8efa5
SHA256

e21b07bdf2068fe3d1dd5d896f263630ba3c0b28a2243dd786a44aa40e086500
SHA512

3c76d61c8bb31fc632445ef6349b45997e9fcf748dacd61c75bae158f375fa5b845cf519f7959c7f62eed70b08a6e6b1ab45ea7f78d864b3e81b7bcc3ed51fee
SSDEEP

1536:V5JDqcQDM5q12pn2wOqI2m33B3n06t5nd3D7JDykQSFVEPKeLGPzIlRvO8H7f40L:VzWga2fO1n3x3/5n9fJDykQSrEFiPETv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a3ab32f5b97ee31fdafd32a7f762cc_JaffaCakes118

Files

41a3ab32f5b97ee31fdafd32a7f762cc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

kbdatat3c
kbdatat3s
kbdatat3st

Sections

CODE
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ