301f15c914456de3a59d5da1b3c62666_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

301f15c914456de3a59d5da1b3c62666_JaffaCakes118
Size

6KB
MD5

301f15c914456de3a59d5da1b3c62666
SHA1

11e84540977584fb77649ec6b2eca4d70d16fe71
SHA256

58f066c4ffc532bb170b381993005eb95f4ab0537918f07ac330b5333d928e6f
SHA512

25f199d5f29462e7110e9c2803da6a21fec28af7e8b06e3a2f643cbc1359ee92e3a83e9cb8ba77f8cdf40d54c34427cafb1a2f060e6121c804815cb8e267f98b
SSDEEP

96:hiU873uVVYGARB4L5g0uAxtYwARdxek6PVZ8Nb:gUQ3uVVfAMuB6YNxxb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301f15c914456de3a59d5da1b3c62666_JaffaCakes118

Files

301f15c914456de3a59d5da1b3c62666_JaffaCakes118
.dll windows:6 windows x86 arch:x86

78117852550454b8ea4c08de904769db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
lstrcmpA

user32

CharNextA
CharUpperA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ