2d4bc72c6fd086478e6cf86795396467_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d4bc72c6fd086478e6cf86795396467_JaffaCakes118
Size

1.2MB
MD5

2d4bc72c6fd086478e6cf86795396467
SHA1

55843f0328bfb843542d06e5b6fd58b4513defed
SHA256

1930bf4367095b0cb13e795697d269201df2d5308ad906480f23585757a75cbb
SHA512

c051d0818cd04191bc530a53f161c871203c4b7a6a5fa104ab7f236c50b1e123f4907c714586a3fb23129d4e67bcd0f35de0672e1a9d63de7a6ab0e7d9834987
SSDEEP

24576:wFsTcrG6GW/UGYWZ9OxcKyIu2vgwmI35TiEcAa6:wKTuatlxcKksTiEcAa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d4bc72c6fd086478e6cf86795396467_JaffaCakes118

Files

2d4bc72c6fd086478e6cf86795396467_JaffaCakes118
.dll windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
IAlloc

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ