0ae64fd935ab15e502459751ee3fba8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae64fd935ab15e502459751ee3fba8f_JaffaCakes118
Size

393KB
MD5

0ae64fd935ab15e502459751ee3fba8f
SHA1

2b7ab20ed43515f00918fcd0c91e24801f9922b7
SHA256

22e6d4c7b0ff992ff10e1f0aa728db756678a5300ae65990f975819dd138476f
SHA512

f9ae3d648f1e3eea082f10be59a21fad66f70cbf35d4e4ddc7d689e82ef3fa46b8cbea1edd2d9253717a8c29c4c295293f422cbe433a7db6f775f20b0473c159
SSDEEP

6144:PBVL6f4rt9iSH/7ve+sP2Y8aXchnd87m378GxoC00f9TBJX7sB7S0e:Ay8SH/TlMv8aX2d8G78Gxo0f9TbLOve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae64fd935ab15e502459751ee3fba8f_JaffaCakes118

Files

0ae64fd935ab15e502459751ee3fba8f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCmd

Sections

.text
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ