f0a51c3818cb8a32e3d3dccec93f2e5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a51c3818cb8a32e3d3dccec93f2e5b_JaffaCakes118
Size

68KB
MD5

f0a51c3818cb8a32e3d3dccec93f2e5b
SHA1

105c55951d12c0a853ee6f7a67728a73ab7dd2c9
SHA256

fcb83d11b9c565268cc93ca6a69e90b00ae362b3a93ed89374ef1f531c92a70b
SHA512

e9a393f46636736c6e209ec238d9639ac1b0d944a80e1db0e3d461834d76b6c706f4e3b248e5862df155e62e4bb75f56fb0fbf1be1deb3039fdcf8df001de191
SSDEEP

1536:vokXK1xkaoNiSUJkbH6vixBLig5518nrHPQD6g94ZE:pXKGNiSeVvixBLig5CrHPpZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a51c3818cb8a32e3d3dccec93f2e5b_JaffaCakes118

Files

f0a51c3818cb8a32e3d3dccec93f2e5b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ