e9e5de3ee6ea9dfe3c8d05ecf074c310_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9e5de3ee6ea9dfe3c8d05ecf074c310_JaffaCakes118
Size

173KB
MD5

e9e5de3ee6ea9dfe3c8d05ecf074c310
SHA1

396b95bdb328cdca1f0b521b66482b4bc6f28d65
SHA256

9f08a189c9518fef84a48e16f61c895297fbda3800ecae9f9414ba45ace9c727
SHA512

5dae16e046e99610e44b954f75eea103c37484f28d7938e7db8c00c109a1fb3142ea7c21480f14a96868b7b3c23e22462dd728be277b43fe8c1c7fb29444327e
SSDEEP

3072:DxEjZjteFA9PH31MZ8Sp0QkB2uUSa6caJQDXRsvZbKpn9K/4BQQbmG:DxykFA9v1M0y2tVgn44GQbmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e5de3ee6ea9dfe3c8d05ecf074c310_JaffaCakes118

Files

e9e5de3ee6ea9dfe3c8d05ecf074c310_JaffaCakes118
.dll windows:4 windows x86 arch:x86

529eec90942b849c7b88958663d3d3ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetLastError

Exports

Exports

NSGetModule

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ