e20146551b34409d71dde02a8e3d5c15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e20146551b34409d71dde02a8e3d5c15_JaffaCakes118
Size

25KB
MD5

e20146551b34409d71dde02a8e3d5c15
SHA1

7ade36c7162604343a413766836558568c4a32cf
SHA256

b8c735f4e27d7f659ada6af11aded9d09c495b956d349451558910aa46e10d74
SHA512

5dfcf37e17418097b6187019bea8235567381ca9ed6721fef5dec8b93486d019643f430ec6bdca80caa2724f5830aed500f26e3aeee9541edbf39ec085cc0ad7
SSDEEP

384:GU1oEXxx5SYbkuJ7tgRsxZGhAELSNaxXr3cMT:p1PPbku/gS/GhAE0axb3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20146551b34409d71dde02a8e3d5c15_JaffaCakes118

Files

e20146551b34409d71dde02a8e3d5c15_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Busy
Start
Stop

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ