6557340c4483e13baa2c7fc64250042b_JaffaCakes118 | Triage

Sharing

General

Target

6557340c4483e13baa2c7fc64250042b_JaffaCakes118
Size

32KB
MD5

6557340c4483e13baa2c7fc64250042b
SHA1

4ef303818614c2f1054193e80978a1edc6f830b7
SHA256

ac4da85e238731093ac1b4e9313fb81246e57783d941e0a142dad0fa5992946c
SHA512

80dd126688c4bdf319e3ac3cb7ebb1099317ea4246d78af16c470cf42d8cee3b06fef7ba3716edc900b723e722dcced089dc7abf4dab1615d518ea122eab6642
SSDEEP

384:nNbE8+zS7aCO8BwMGNkb5IhDtANWRmXhGlPifI5cHfyhQ4LuZoDO4CZvDU:NkemCO8yaGDSeg0kflZ1vY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6557340c4483e13baa2c7fc64250042b_JaffaCakes118

Files

6557340c4483e13baa2c7fc64250042b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

271530a0ef63144193795d09b5ac2c05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ