55042d7b0947440bbd9f779eafaba9b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55042d7b0947440bbd9f779eafaba9b8_JaffaCakes118
Size

336KB
MD5

55042d7b0947440bbd9f779eafaba9b8
SHA1

796b572900964e551119069f915c992d52e9ede7
SHA256

6c54fe0a558df382fd9bcb93bb5ade461afb0df829561700b11b547d93786644
SHA512

b969db51ecba9c99bd1a9cbc767535f127214191e2edb45f3b11c3b6c9865a035e23f79bc5b0bf5338e157909f76a41b21a42e981ff1a789d21be0bf3f4eacd1
SSDEEP

6144:aB9KmgtKRb6sOA6+c899aRc/WzF7LZhvoh5OqLbIt4g6XOs7S8xS9:5ISA6lE9kcuhHZhvE5bb04g6XfS59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/facebook.cpl

Files

55042d7b0947440bbd9f779eafaba9b8_JaffaCakes118
.zip
facebook.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ