d55e3922a38610435335162cbdbb8c83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d55e3922a38610435335162cbdbb8c83_JaffaCakes118
Size

89KB
MD5

d55e3922a38610435335162cbdbb8c83
SHA1

ec816a5efc4aa64de67d645875b151a5edfb3c44
SHA256

b0d7f0a68515952ea47a7c65d4e95524c82f86d3e724227b5bd96358487bfe96
SHA512

e154028927512928a0dcb5593a93e6f8ed19e524d6c279af73db95e21fb3ff4104523086ad692e59aa44b14cb7d677900529f816c448cd79dfc818d2bc4497ab
SSDEEP

1536:Ofep7dSBna334Xz4cW0FGjKwtvM0TXmkE5sxlM14p3XzR46lnQGa:Om2RLLvTgXtTlnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d55e3922a38610435335162cbdbb8c83_JaffaCakes118

Files

d55e3922a38610435335162cbdbb8c83_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\savxp\build\symbols\Release\SWIManagement.pdb

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ