fa7b8f568e807786e7a5868f173ebdc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa7b8f568e807786e7a5868f173ebdc4_JaffaCakes118
Size

4KB
MD5

fa7b8f568e807786e7a5868f173ebdc4
SHA1

a329990f509f5c86c3c7eec5f4d649b184e1b06c
SHA256

d0fa2907be44ac485707c63fb7a506ff12af9fbc9cc7b5b92ee1c3a9fe3b949a
SHA512

cd1bb88c8737fb1345aca94982773472371ae6074396e326f5241b621c70a23588c9fc4fa9c4dfd93dc02b0488b2956efe1e0daf6bab0fa374beb6771dcf5a2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7b8f568e807786e7a5868f173ebdc4_JaffaCakes118

Files

fa7b8f568e807786e7a5868f173ebdc4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ