d05c8febf231e758d261df8dc9d87088_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d05c8febf231e758d261df8dc9d87088_JaffaCakes118
Size

8KB
MD5

d05c8febf231e758d261df8dc9d87088
SHA1

1a67864e3e0193dab1db1be9769223e263052549
SHA256

e3b54c4e269124ff2e874549417cded5595b490f3e132d04c17358c8791fc14b
SHA512

92a124b020fbcd3a5a67d72341e6d68f04b657f3ba88bfe87dc06e55985c7aeb51005c0c34afe5939f0c1e9251a8d6666e1e8b673b57050239a6565dfafbcc64
SSDEEP

192:Pfj8Yz5EAiUrgikO3B4/zDKQrXds+WHzdj+i:PfjL5EfpVO3B4/nKKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d05c8febf231e758d261df8dc9d87088_JaffaCakes118

Files

d05c8febf231e758d261df8dc9d87088_JaffaCakes118
.dll windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ