d51d10bf657b003ba1c0a8140cedaf40_JaffaCakes118 | Triage

Sharing

General

Target

d51d10bf657b003ba1c0a8140cedaf40_JaffaCakes118
Size

83KB
MD5

d51d10bf657b003ba1c0a8140cedaf40
SHA1

1f1e54201bb21ebc0d1025b0c30009d605f4075d
SHA256

30e653edd9734224b1df52d976278f4081ec7ebde75a15c985c1cca12475d69c
SHA512

a1ef2075cc2a14a03713289367a117f167017abbf7106274fc921398c75f64d8bd551b2bf2a0e81b3b7ee6cc4f666d75fff0a098809a6984f61c309743d24520
SSDEEP

1536:YDmDiHPCpsER8ugIeaM4uAjZVb0kOKZlxgvYeCQ2QTo1w38PY:KssEXhe34uAfQkxG3CQ2P1w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d51d10bf657b003ba1c0a8140cedaf40_JaffaCakes118

Files

d51d10bf657b003ba1c0a8140cedaf40_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ