ead489d495031a0a719585974af33169_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ead489d495031a0a719585974af33169_JaffaCakes118
Size

64KB
MD5

ead489d495031a0a719585974af33169
SHA1

5ae1e7656cf79ef0e527607a69d8010e0b9b0bfe
SHA256

a25fc820fa4a5c4c8b21ef6ea592703b273fa7f2f608a69fd937ba96f4502f4e
SHA512

dc7e0ed0bd992888ee8594e4453000edfa05a1e310786d777f39c10bb65e1d0c688d8eb9d743f2343acd13c4b14ae3c3c0ad155a109a23aef5c97db469358e30
SSDEEP

1536:uMHSIHT9yM8vlC30kq/LN7vz2GjiPuAWCNxo1f2CGEv:u1QT0hvlC30F/LN7vzG22xo1HGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead489d495031a0a719585974af33169_JaffaCakes118

Files

ead489d495031a0a719585974af33169_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ