a6097d686e306e4e8d570db9375f6c39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6097d686e306e4e8d570db9375f6c39_JaffaCakes118
Size

4KB
MD5

a6097d686e306e4e8d570db9375f6c39
SHA1

374297195181f7e408864337e8a3a5454551d135
SHA256

ed89cea03305704ce2cccab64e339881e5ec0d23f55824986aa856555721658d
SHA512

e76a73ad50d4751a3cf7b67609fc54c0f9b3deb8bf5bc374d2a8d20a42a0c1b8ce23c4cf797bf6e39c6004ba908fe81b0a1c2bd4278ec041a3eff713a5f6aa38
SSDEEP

48:a5z4K+cmATmRYoRZCTJzJeZ8pw/HDq+9mIlKENQ6H9EDw1V:MTWnRZ0lJeOpg+hAQU9EG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6097d686e306e4e8d570db9375f6c39_JaffaCakes118

Files

a6097d686e306e4e8d570db9375f6c39_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 417B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ