dd199ef8c6f603882bf6ae7826db9631_JaffaCakes118 | Triage

Sharing

General

Target

dd199ef8c6f603882bf6ae7826db9631_JaffaCakes118
Size

71KB
MD5

dd199ef8c6f603882bf6ae7826db9631
SHA1

a78755beff6a3ec9286c5f3d70a8911d27a8fc2d
SHA256

593c6deba8626896b2057c2c9b5e2349b3b7d6214303ab86daebb5ca5a378ccb
SHA512

2aa7e02f6136a0be173f858fd0fb62d9dc7ebcfa99a2b10fb886e8a911fd60c531a8c7183780e428b1b97429c61c4e0ed16ac4329cb6ff3de36ab6775d8ae062
SSDEEP

1536:H5VamTaK5Dud3oDJCQVdyq98Hx7vWAZiyO:naUaEoo4jq9Gx7d3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd199ef8c6f603882bf6ae7826db9631_JaffaCakes118

Files

dd199ef8c6f603882bf6ae7826db9631_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ