d43ec23a2523b9b9a8f9e223b019bca9_JaffaCakes118 | Triage

Sharing

General

Target

d43ec23a2523b9b9a8f9e223b019bca9_JaffaCakes118
Size

37KB
MD5

d43ec23a2523b9b9a8f9e223b019bca9
SHA1

f0fe6c4d7ac27a1a2a6fed14a21c6c6c9859094f
SHA256

09587c6afc6914d28e589534b25a13c374630143550ce08217247dc63aa8152f
SHA512

44548ebd85a639557f87edac4004d315c66254e91a6b0ca6b0fa4f78b47fc522ee6c9c6fd41d4b31e06506d960ad996e5f8b09f69a349e203224615c4b8b2697
SSDEEP

768:cJTDOWXBw4fwg+vuly/Yg7LfCsZfkxRI0qEAYjEL:CTiWXBwxg+vfDiyfkxRI5E9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d43ec23a2523b9b9a8f9e223b019bca9_JaffaCakes118

Files

d43ec23a2523b9b9a8f9e223b019bca9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

IDATA
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ