8804c5815cbcb0a4d74775ca29f44a56_JaffaCakes118 | Triage

Sharing

General

Target

8804c5815cbcb0a4d74775ca29f44a56_JaffaCakes118
Size

11KB
MD5

8804c5815cbcb0a4d74775ca29f44a56
SHA1

4bf57a8c877f9fc501d199ec599a8dcd5189a96d
SHA256

87f92a3c66d0d8ee60c0a3807bdcdc40e7d2839938da14e0cf728f9b6c204f1b
SHA512

d91856cf4a0f836e0f8957e326afd177fd7d6d5f68f986dbeabbdfa5ffdd497968f1b04dc86bbca21ad75b880e93692b40ac2e3105321a89ef9b48c3eda4946e
SSDEEP

192:cfbOmrA+FOwrJgoCZWlCB7c2U+sY2nr+CKohs:cfb3wayoE7Qu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8804c5815cbcb0a4d74775ca29f44a56_JaffaCakes118

Files

8804c5815cbcb0a4d74775ca29f44a56_JaffaCakes118
.dll windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ