766262ee89b1b8093f0f94e370d85746_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

766262ee89b1b8093f0f94e370d85746_JaffaCakes118
Size

106KB
MD5

766262ee89b1b8093f0f94e370d85746
SHA1

c5d8602afbae6491525fa7e0974b5ab5692d396e
SHA256

29448ed53103e9453c99cfebf0397586b290608a1e774218dff9c8d1a8501d05
SHA512

bfd987ac1a97abd5c2716acf138aabeebc60d8f4b2fa32fab023fc221184239515e71e098efaf2367870d4c189d2fa863c84004dc539a2b10b270d5e6f7bd1c4
SSDEEP

1536:HvLx88J9dqr9COKxlopM0KBSeN5XlGri3DXo925bVn+KuwqjEwy:Dxpkr9COqo27S05XlfzCIVnijEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
766262ee89b1b8093f0f94e370d85746_JaffaCakes118

Files

766262ee89b1b8093f0f94e370d85746_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateFtqhbhlh
InitTpvvhxxko
InitMgcquar
Ltqyxkloo

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 24KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ