f088a52ffa6876568ca33bdd1ac4440a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f088a52ffa6876568ca33bdd1ac4440a_JaffaCakes118
Size

5KB
MD5

f088a52ffa6876568ca33bdd1ac4440a
SHA1

b3353c4c9e3d64bc2c5514862afeda3a84fd5715
SHA256

7040b8130114bb72afc6d48dea92e9db5bfffb751f8ec552c2a980a9bce9c705
SHA512

ef96f86a651a85521c9fc59dbacb60187eec635276dfc1d3bcf9f4ba0cff31d3ad444ce51fea2f7c49b1baa71ccd4cf05fc1abcabda7745e34e1dc70ae6e64df
SSDEEP

24:e31GSfS3NPL4fPlPJ16PeLpx50P8KX/XaSiwF2JrgC/xdc9ncdbcVKYnq6hl3XIQ:CfqMfJJU2K17iwwc9cdbcpnNYB27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f088a52ffa6876568ca33bdd1ac4440a_JaffaCakes118

Files

f088a52ffa6876568ca33bdd1ac4440a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1743a5b9816a58c2129527a62802cc12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread

Exports

Exports

GetThreadBot

Sections

.text
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ