ea6caefb9c91aa2c17b535d3270843da_JaffaCakes118 | Triage

Sharing

General

Target

ea6caefb9c91aa2c17b535d3270843da_JaffaCakes118
Size

97KB
MD5

ea6caefb9c91aa2c17b535d3270843da
SHA1

862415668963960bd9c83a618ff43cde88dc2f81
SHA256

39b515143dbd94722e1f9ddf0b3c0804475b3fcea0f64e09e77c629fcbabef25
SHA512

7cc0b696062f64ede6b36567f90f68ee4f4e8f99072079d99de566d626e3487a8c5315a58b6b89ce30f9ee65c0a5711a579563653278a4b36a8f24b57c645a98
SSDEEP

1536:IQ/F0cA+F5RVZz2+FOQGcJVBJbZDjeFHfIOxupqrWpdiZ8:IQsORVZz2xUJFNYIOMq6p7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea6caefb9c91aa2c17b535d3270843da_JaffaCakes118

Files

ea6caefb9c91aa2c17b535d3270843da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ