9325b8891626b912c941409ac2e01edc_JaffaCakes118 | Triage

Sharing

General

Target

9325b8891626b912c941409ac2e01edc_JaffaCakes118
Size

89KB
MD5

9325b8891626b912c941409ac2e01edc
SHA1

15467fbac6c88e7689f42f70831d381dadf3d27b
SHA256

0cbc83d8e41d6fd507cf134f22b8271b0820e05c2e3547c68c755c73c9c2135c
SHA512

08993d1d266cebfec539991d72aaf3ddad9dd1363d9477729499f5e98bdc895ef1318a45eb3c3ec62338ef5fd2bc658bdfdbb64949b1e11cb7d218ecc64218f8
SSDEEP

1536:pCJ2owF1ap0WiwgrH6eH5ftatgeF6o8mSPTVS1IFmD6d1EhdYevjC:4Jhwny0Rwgz6olOXB8FVWIm6danG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9325b8891626b912c941409ac2e01edc_JaffaCakes118

Files

9325b8891626b912c941409ac2e01edc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ