d1c2ef25c8d4ed0d8986de11a7365dbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1c2ef25c8d4ed0d8986de11a7365dbd_JaffaCakes118
Size

196KB
MD5

d1c2ef25c8d4ed0d8986de11a7365dbd
SHA1

a9fa6adcfb284fb2b1de83caf5c7b5944db82aa3
SHA256

61b2752d1d8e6d89114f0acdcc67e9e49c9c0425147e5519821bb7938f02fa79
SHA512

2e45921a65297e230aab9fcfa9c448489f36dd15908e2abadc89821c0dab0746ba04082956de902cbb724b4f4dc906a50da4abf926161b630254c10092a9850c
SSDEEP

3072:HGgofGuWyLCkjKS1PEM4Nu1PquYenrhJyEuB7kuB7m9cPYoNKFTAjb9VqJYenrhq:mKGKgPg5EnYpr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1c2ef25c8d4ed0d8986de11a7365dbd_JaffaCakes118

Files

d1c2ef25c8d4ed0d8986de11a7365dbd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ