d5db54ed73ad084aab84e1d2b948197c_JaffaCakes118 | Triage

Sharing

General

Target

d5db54ed73ad084aab84e1d2b948197c_JaffaCakes118
Size

45KB
MD5

d5db54ed73ad084aab84e1d2b948197c
SHA1

859cbccb9b5469e5be102456a670c6eeb4f82976
SHA256

64008777902d977b1aea5717215d8ce42e0c58765354b4e9a359508a5677a152
SHA512

ddb8f70dff56d36c0b27cbb80aa6849ae165b43acdc86d1b79d47adc8a8557dd6cde74c88e7b74e7ecb52321e8520c5c35a4e0b994f375b637afc0486a5b5edb
SSDEEP

768:O2RI72noV3/QtjX4KHr9fZQ3LGOHQnjIQkmAJG20s6n/MH7U6:ploV3/W39fZc1HQn0HAAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5db54ed73ad084aab84e1d2b948197c_JaffaCakes118

Files

d5db54ed73ad084aab84e1d2b948197c_JaffaCakes118
.dll windows:2 windows x86 arch:x86

a25e1515e41a6b5d2a03ea2dc69ee493

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
LoadLibraryExA
ExitProcess
OpenThread
GetCurrentThreadId
CreateEventA

Exports

Exports

CreateProcessNotify
DllGetVersion

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ