2e0418306f736cac9e61103ae559e674_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e0418306f736cac9e61103ae559e674_JaffaCakes118
Size

16KB
MD5

2e0418306f736cac9e61103ae559e674
SHA1

3e4c479da88b98fcc568c0e083ba3e03e3848152
SHA256

48f7e293749ee570486df621cc39eea9d0a7a140bed053d882e114a0e7abd405
SHA512

74e2b55e80dc50cda9f1b32b8078ad5e03010eb2ec75c67107e9bccad5b7a94a26f325ede621e685c2aefb5e38727458591c7b053382cd3c5a41d1af4e18300d
SSDEEP

192:KAm9c5CpaXehA8O9I7yfux3ZslKHHzh4DvCYi7JjF:W9cluhAv+7yfl1i7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e0418306f736cac9e61103ae559e674_JaffaCakes118

Files

2e0418306f736cac9e61103ae559e674_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dd5f595b09450a79ec057332bd2c64ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlImageDirectoryEntryToData
RtlImageNtHeader
strchr
strncpy
memset
memcpy

kernel32

GetModuleFileNameA
VirtualAlloc
FreeLibrary
CreateThread
LoadLibraryA
SetUnhandledExceptionFilter
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE