1102fe2ecde611d0e34a4f19eb5eaed9_JaffaCakes118 | Triage

Sharing

General

Target

1102fe2ecde611d0e34a4f19eb5eaed9_JaffaCakes118
Size

123KB
MD5

1102fe2ecde611d0e34a4f19eb5eaed9
SHA1

1df1dd202c3c0574a6f7c0e44fc012b9e97bfd52
SHA256

80c518e364fe7302a33101f0327c3960558417457c2e27d791b3539725e29200
SHA512

c598f8e4577ea9caaadcf58cd531c1b13de227eaa0f05406010e6e847b2452095a5a4893b5fd6b8367d1c39b275d48b0ff1ac5c5e316021ba49f0f3bfd0bb43b
SSDEEP

1536:6j6jV6JTk1zxzFN9tgUI+9y/K7RbvQanwnF6jlfVReCwQgu5K4dwGQq75HBXz:iJY1dJntgUx7qaq6U45dwGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1102fe2ecde611d0e34a4f19eb5eaed9_JaffaCakes118

Files

1102fe2ecde611d0e34a4f19eb5eaed9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Entry0

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ