02db56d64d8327cc558d8005adcb9702_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02db56d64d8327cc558d8005adcb9702_JaffaCakes118
Size

3KB
MD5

02db56d64d8327cc558d8005adcb9702
SHA1

2d7d554a328e5d2d3bc786918d387374244c70d3
SHA256

1f75479f90e620c28ca591dfdf096246f410d0afca098d318fd2418dcafa7b96
SHA512

786431a28c13e1101b5f7a561ff24a21668cbf118d0b3af7ff4da3b020410a0d83e985f339f182222a992c55ae770f799290523bbc84439584d7798f2b4ff1ff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02db56d64d8327cc558d8005adcb9702_JaffaCakes118

Files

02db56d64d8327cc558d8005adcb9702_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 417B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ