dd7eaf8bcb7489f4cb92c72efaab8947_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd7eaf8bcb7489f4cb92c72efaab8947_JaffaCakes118
Size

73KB
MD5

dd7eaf8bcb7489f4cb92c72efaab8947
SHA1

557bb6e04ffa79ed310f5e7767e887e9240e762b
SHA256

8c1cb7bf82888e88645e103fa9ee54359630b82b363d992db54c47761176407a
SHA512

9c64a1f3a438a343016c7778bf33f12471ca073e35c575cebbf4e55ff08a83040d1e36984bb698d5f8a8800cb40952d5b8d001c679ad08d83df5ba606ccc407b
SSDEEP

1536:rH252owFYr+3kn7PWAUFGopLjhWvhJgLFmgz9AHZ3an4vvdmfnwzKQ:rH25hwg+3kS/FGiMY79A53fvdmfw2Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd7eaf8bcb7489f4cb92c72efaab8947_JaffaCakes118

Files

dd7eaf8bcb7489f4cb92c72efaab8947_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ