c2472b54709970e96fa772a364c4170e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2472b54709970e96fa772a364c4170e_JaffaCakes118
Size

4KB
MD5

c2472b54709970e96fa772a364c4170e
SHA1

e3a36bdf0484b72b23790c5763c10d3ba132d9ce
SHA256

620477a06a76beebcb56c0ebc6c700b75d252b0ec3c40dc2304378bb568f8303
SHA512

ec4ac2d29ff17c402ac22b42f9a4a2ea613a609b3e4b1707c67734a8ad6d4a2e9fd60c40624d42ffe4e469e3b094a34558d8ff558b4af9751981ccfbaade5d52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2472b54709970e96fa772a364c4170e_JaffaCakes118

Files

c2472b54709970e96fa772a364c4170e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ