e005bbe03670eb583236ed121dd37080_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e005bbe03670eb583236ed121dd37080_JaffaCakes118
Size

18KB
MD5

e005bbe03670eb583236ed121dd37080
SHA1

e881c624b8200582d9f458eb330827127c14e758
SHA256

2e98d468ca1cca6cd7c3e507d6f7353ffdc91f5b18906f24ca249e107c39ae65
SHA512

dfd9db25ca62bdd3625d8a6b47ebdbc3cc1555ed1469f48178cb72af18ffbd0f7cb7a8741ce5c0d02a259a7abd0c49c8a204fbb9fec359762efd5e14e56bc76e
SSDEEP

384:NRneP19npfJRNGXOdfqaN2qRRCOC4MQz23DM8b2d8C/kufvkjXqe:NBkNnRLJ6M4F6K6krjqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e005bbe03670eb583236ed121dd37080_JaffaCakes118

Files

e005bbe03670eb583236ed121dd37080_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 440KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ