74e21d0d84b3966dd73222f422310c5d_JaffaCakes118 | Triage

Sharing

General

Target

74e21d0d84b3966dd73222f422310c5d_JaffaCakes118
Size

118KB
MD5

74e21d0d84b3966dd73222f422310c5d
SHA1

71ba63dfe3204386e65eeafcf16ab60342d6ffe4
SHA256

37bcdd5e630dd20e824cf87ca451d63d3538713169efbb3b0b71eb341db9d65e
SHA512

6638346c4c909fec639af443a0e07d5c6a8feb41cb6f4814ae863f08ce77a6b1185c815e04e11efaeaaf4accabbe23a6c44f9ab64583e0ac2d5afdafc16f22b2
SSDEEP

3072:I4JUnSo3FNqQD3H1WdGJLpo+HN1T4y9nuPMUYiAd78Wg:LWnSuF8k3VWdGJLpo+XsC3UpAqWg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74e21d0d84b3966dd73222f422310c5d_JaffaCakes118

Files

74e21d0d84b3966dd73222f422310c5d_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ