d69f810b0e9dae3de3a0f2e48378211d_JaffaCakes118 | Triage

Sharing

General

Target

d69f810b0e9dae3de3a0f2e48378211d_JaffaCakes118
Size

231KB
MD5

d69f810b0e9dae3de3a0f2e48378211d
SHA1

9f8d4d420f6b0fdbec1d746f86cf82c80327a4af
SHA256

631e03912a3d4d2acfc10b09d473d6fefcfb616d6f3b4be2c63cddd30cf1e814
SHA512

65aa55151ade6d970b0ecb1c802cfd4713a151b63852a7cb5b01933a26bc83373c0a095d8e2fb72af1d4aee8cce0c51a452340a3b333599fd3706e0e585e48e0
SSDEEP

6144:nDozPB80jNQHMm7uh9VSBXRRE3teIBMpm0kuRSe:DozZ8kGs79oiwIBMCuRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d69f810b0e9dae3de3a0f2e48378211d_JaffaCakes118

Files

d69f810b0e9dae3de3a0f2e48378211d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE