fd1aec1607fc0ef966067986eb8ce611_JaffaCakes118 | Triage

Sharing

General

Target

fd1aec1607fc0ef966067986eb8ce611_JaffaCakes118
Size

70KB
MD5

fd1aec1607fc0ef966067986eb8ce611
SHA1

4d819ae29179001ec8c491a8b7ee644106b49b50
SHA256

b9714f9044afb8214189cebd2470a66fc40f783fb272653ddad18c541d16c378
SHA512

7c2ecf490c8a770a616ab70850236a0e30a2cf244863bb5ea9d65d48fb0cb08e1849ebd1ef0709315e868e603bde7cb675e4616b238cc9d739dbe63e598b933e
SSDEEP

1536:BD6K271gp7DXvCf45csyc6w+KmdGdkAhgvtX3JW6Dpz:BDGYLagRZ65vEdjOlX3VDpz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd1aec1607fc0ef966067986eb8ce611_JaffaCakes118

Files

fd1aec1607fc0ef966067986eb8ce611_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shrwsds
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ