dba1062a1dff32b728d003361768d9ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dba1062a1dff32b728d003361768d9ef_JaffaCakes118
Size

4KB
MD5

dba1062a1dff32b728d003361768d9ef
SHA1

cfae96aa0e1d2226f71aac918872938d7f894416
SHA256

5149c0bf1046f9e8f5e3d82349d865a9d2f58665b7e89b7272e8f7f14f07d11a
SHA512

5e6d67398dc343679e43714cf6143de0b69d78270033ad033bc5102c25a43f806e628cf520ebc2df87ec694abb7db74d9d0489adef218d929576286b2c2c2eef
SSDEEP

48:a5z4K+cmATmRYoRZCTJzJa7/lAH7lTo/nA3wWnJWpyPjO:MTWnRZ0lJa5AHBTAyJJPjO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dba1062a1dff32b728d003361768d9ef_JaffaCakes118

Files

dba1062a1dff32b728d003361768d9ef_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 417B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ