16d2bf18f2e7f894c5201bd40f5ade82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d2bf18f2e7f894c5201bd40f5ade82_JaffaCakes118
Size

1.2MB
MD5

16d2bf18f2e7f894c5201bd40f5ade82
SHA1

c776939170800d592dbef5f97e01f15880b4854d
SHA256

76d50e2447c32416effae4f5bfa887049ecc4caeeba2312561f100b473b68d5c
SHA512

05f972605f9ff1e4a96e803de96358acc3644615f1ec7b59ea7cac947b0152aa26dc94c9c8add6666136600ff4a06499e9b050c412780278142a5a5b804fb3f5
SSDEEP

24576:H2zz4JNzX/SwCb2ORfNdFo1Vw/HzRZObRKQW8PmAm4tNt/kTzXh:WzazXqT2OtFo1HRtW8ltNt/kTzX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d2bf18f2e7f894c5201bd40f5ade82_JaffaCakes118

Files

16d2bf18f2e7f894c5201bd40f5ade82_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_QueryInterface@8

Sections

.text
Size: 1008KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ