54b9d8ff101d2981dea5d79b0d4db440_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54b9d8ff101d2981dea5d79b0d4db440_JaffaCakes118
Size

70KB
MD5

54b9d8ff101d2981dea5d79b0d4db440
SHA1

9bed178f2c4f0938067f66351f012a9da408352b
SHA256

6f542b12ec36980e6659fed2c5350150694532f41db58439f120ed763a74166c
SHA512

9f7af0c87e5500198c8d817fda91b7b5eeccdcf940c53d856c7be7550685f8c5557448f1d69be799a195b0b1dd50725637d89cb58ac3a9db272b309a39cf8123
SSDEEP

768:okFpisvuzgdwMG9hl7c1M5uEcnZ99AOrw671CAp385BRCwBqcqZkwZEn4LZb:JFplSbm1rtAOrl7TMZCkqrZkkEn4d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54b9d8ff101d2981dea5d79b0d4db440_JaffaCakes118

Files

54b9d8ff101d2981dea5d79b0d4db440_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ