f69af2b201401f6f524f9645a0373d17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f69af2b201401f6f524f9645a0373d17_JaffaCakes118
Size

12KB
MD5

f69af2b201401f6f524f9645a0373d17
SHA1

d9700f4c7455ac071b04c952356913c63490fc04
SHA256

a06ed55390eb5e8d5021975d07c9aa130a925aad03279be4307f239edf4523cf
SHA512

c39342408dd4435faee50127587292fb367332d845af0bbc01eef36583c23606175133a3be70a34de17dc3b89b5f5e9926f4ce8a1ae7df758bcbc6f2d9648b5f
SSDEEP

192:R8UvrDb884bENM4NVkxTn72LAY4WinYftQRihYDmTd:6W/KEdNs/Y3QRihYDmTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f69af2b201401f6f524f9645a0373d17_JaffaCakes118

Files

f69af2b201401f6f524f9645a0373d17_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ