ea5ddc40cebdc8810d0376d65449a029_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5ddc40cebdc8810d0376d65449a029_JaffaCakes118
Size

1KB
MD5

ea5ddc40cebdc8810d0376d65449a029
SHA1

79aecfd89d539ba1808641167ad37a2eaf86cb45
SHA256

e72d0b097a7d6f73ed85be03b66ecd3b20fe7d03f08507f52946e6f444d360d5
SHA512

6c0066f0f327096de929d3cd0f5841eb72420db43ac9b8d3b30e7c253942e70758c5d7c00c1810889fec426245cfc2fbac410c008808795458b778184e0a438a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5ddc40cebdc8810d0376d65449a029_JaffaCakes118

Files

ea5ddc40cebdc8810d0376d65449a029_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ