823ac489700f08fbecd79c2456d5b19e_JaffaCakes118 | Triage

Sharing

General

Target

823ac489700f08fbecd79c2456d5b19e_JaffaCakes118
Size

6KB
MD5

823ac489700f08fbecd79c2456d5b19e
SHA1

6df63a166e3a5f6a15ced56a97f106e0e36de03d
SHA256

04c10ae8e78d5895a4deeac1986bbdf3ccc1d9e0f72d8e1d8ad2864894debf94
SHA512

d863b5e4645a0030c13405e00a47fbb5a51ee3199664b9842f89a15ad1f353692a0b1adb320d3587e069fd121323daf72fc387eeb75d2dbf7e7124fc7ab4c9cb
SSDEEP

48:qJpy9FeU2WnyV0Q920VUm1h8y1hhtY0FARdxlUk6P0tCVZ/PVpw8Ruy+:IjKy210em1KyxtYwARdxek6PVZlpZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
823ac489700f08fbecd79c2456d5b19e_JaffaCakes118

Files

823ac489700f08fbecd79c2456d5b19e_JaffaCakes118
.dll windows:6 windows x86 arch:x86

78117852550454b8ea4c08de904769db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
lstrcmpA

user32

CharNextA
CharUpperA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ