5daf7fefe669779424ada733ef7d7b8e_JaffaCakes118 | Triage

Sharing

General

Target

5daf7fefe669779424ada733ef7d7b8e_JaffaCakes118
Size

18KB
MD5

5daf7fefe669779424ada733ef7d7b8e
SHA1

8696947772716c95f2065e04728927cd576818af
SHA256

347c42e1cfa5d09d2f37f40010872129b58324f7e97572ec1a2c89b900545109
SHA512

2091e321e47a9a83b1c6e5972a28c3cde0d90d1dc582ca7edbeb763a1f80fda08b916967e235d6cad9f2c0c94e7f17bfc62c959391ee262b14384f70f34a6b81
SSDEEP

384:UzJo1zBQJ8Xz9JQTEHGM8fvP1aWlDjbKdKm7K0Z:UczBQJa0Hfrf2bZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5daf7fefe669779424ada733ef7d7b8e_JaffaCakes118

Files

5daf7fefe669779424ada733ef7d7b8e_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

4a5c7016f8a55183eaacea531147a4be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA

Exports

Exports

DllInstall

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ