ead0fa5360b4b58de60e6ac57aae6376_JaffaCakes118 | Triage

Sharing

General

Target

ead0fa5360b4b58de60e6ac57aae6376_JaffaCakes118
Size

15KB
MD5

ead0fa5360b4b58de60e6ac57aae6376
SHA1

47036b4403c04d7432b5173b5d5d0a49680f941d
SHA256

8df2793dcbc88487e1804600863063d2963ed587207fe00eeb266fadc8c97be2
SHA512

4513b2ab24beae08a69b2afe99c9fa33dab2ca353652c706f208dd811937826455e3818208cf44e7162bc45f69f785a1647bd9dc79dfb2b3be031efbebdf37f4
SSDEEP

384:lNmhj5jd4ao5DRaUf832k6cVASXfWt7koohBwaM+:rmlBr6R1gLVASXf2wbqV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead0fa5360b4b58de60e6ac57aae6376_JaffaCakes118

Files

ead0fa5360b4b58de60e6ac57aae6376_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ