4323a5fc10a32a4aa493f1e45df70e39_JaffaCakes118 | Triage

Sharing

General

Target

4323a5fc10a32a4aa493f1e45df70e39_JaffaCakes118
Size

116KB
MD5

4323a5fc10a32a4aa493f1e45df70e39
SHA1

a7b88c5418b768c63d2f98f671363fcb0b591dec
SHA256

9274c42c30b94882a6e3935211841ad1afd29f6610d00a37d8487efb2f98ef00
SHA512

a2693bb943e0e2c10d71536af7e5bc29cbb520da9262950026d3da62ae702b484f3d6bc2f2df0ae97b531ca825d61d1fc0de4188638972adee32abcba74da1fc
SSDEEP

3072:elQmnpO2VmZEJCPYVBuYroK9WbMDp54FUJaqu:eOBmjJCPqrIbQkmJa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4323a5fc10a32a4aa493f1e45df70e39_JaffaCakes118

Files

4323a5fc10a32a4aa493f1e45df70e39_JaffaCakes118
.dll windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.nos
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ