d547bfabb29f7d3c72ed2ad2feda469c_JaffaCakes118 | Triage

Sharing

General

Target

d547bfabb29f7d3c72ed2ad2feda469c_JaffaCakes118
Size

71KB
MD5

d547bfabb29f7d3c72ed2ad2feda469c
SHA1

8d3716e8d38217b03b6cebb00b3a092289215f3c
SHA256

3629f98f7e2610c6d20bb0cca183f80e4599f64279b1a1867c8939a568112a15
SHA512

07a24a40928ef3ccb0374990505275e9be6cc52a49de4273ea283e53ecf89fad86b96e4209fffe80fa7afcabed561f6edaa59ae0385dc3aebfc6ee0466006fd5
SSDEEP

768:HkSpisvuzgdwMG9hl7c1M5uEcnZ99AOLp38/JpPPmNbHtPUhpiOK3n4LZ:ESplSbm1rtAO1MvXmN7tP8iOK3n4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d547bfabb29f7d3c72ed2ad2feda469c_JaffaCakes118

Files

d547bfabb29f7d3c72ed2ad2feda469c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ