559bb10eb54b15ddefbe6545a09da8ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

559bb10eb54b15ddefbe6545a09da8ab_JaffaCakes118
Size

71KB
MD5

559bb10eb54b15ddefbe6545a09da8ab
SHA1

bb9143aca558359d8af71635e794a70391f14a4d
SHA256

aa9c6acc35406aa775120da6f642747cd00a0fa06931585ce9ae2f167b3cbb33
SHA512

ddff5e447822310325ce617d8b33f890018329bbc0615864a08d11442a435398e8b8e5339c3ecbbaa643d9ad3309c54dd87fbe095079be0d33c341e95ca8ff68
SSDEEP

768:ckhpisvuzgdwMG9hl7c1M5uEcnZ99AOkAdgVp38MpMXTnkx+UZJnbkpHx4Bn4LZ7:1hplSbm1rtAOkWgnMMpwD4nJnbhBn4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
559bb10eb54b15ddefbe6545a09da8ab_JaffaCakes118

Files

559bb10eb54b15ddefbe6545a09da8ab_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ