a11e43f8b8596b96b48c091122ba26c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11e43f8b8596b96b48c091122ba26c2_JaffaCakes118
Size

25KB
MD5

a11e43f8b8596b96b48c091122ba26c2
SHA1

47f99fdf1fa47427d6142e031b6eb63fb73c91cb
SHA256

e466b7ac264f206eb12027e8cde2625e693bcaaf3335d0ba5333a67b27770cfe
SHA512

04921255ba029c14509d6e03a3862088c46f0370e2da6b94bd2e788b59dfd20b2910ea44a42a3d7ff7b574b272796d0ea9d245acc9273a413f46ef1402b88441
SSDEEP

384:IaCWqQ5I/DNPVTc3Fk1KBMzAvfPEVCTNAxaabU0PbT1hjix9rYiVNJQRuc3:I4AN9TcisBFnPU5T1hjit

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11e43f8b8596b96b48c091122ba26c2_JaffaCakes118

Files

a11e43f8b8596b96b48c091122ba26c2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

72385a557a38f80f59b692b31555af3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetLastError
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ