359e5fe1cbf36e62e978e09962c61206_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

359e5fe1cbf36e62e978e09962c61206_JaffaCakes118
Size

6KB
MD5

359e5fe1cbf36e62e978e09962c61206
SHA1

31a771dddf24bbc24802d10e96f7af1dcdde98df
SHA256

c80f28d5f37dda356ebb85bd61e2a25d61c8a1a4ef8aff99ce827b73bcb3e84f
SHA512

ba52e2658a8573698af06431306d09d2dc3a3d3df7f5a0dbc82a73d48d7eeab3b3cf8efb224fab20ac7a6be76574a2f5de63d6ebb5878b76f2969c757e8399e3
SSDEEP

192:nIORsqyuL/+njXoNs6JY6nRW03p1CKtIk3n9GPNp8E:n5RsqujXAsS3p1CKt9n9GPH8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
359e5fe1cbf36e62e978e09962c61206_JaffaCakes118

Files

359e5fe1cbf36e62e978e09962c61206_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ