2f6b1c4c0ff99192be0621b4beef8930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f6b1c4c0ff99192be0621b4beef8930_JaffaCakes118
Size

6KB
MD5

2f6b1c4c0ff99192be0621b4beef8930
SHA1

87df79ac3586f2db589da5e1318b36e82c69da80
SHA256

20cfa43ba61e2b21e17543aec412f193d2acd3adf7309f138c2d1f5a0f27ee61
SHA512

0161f87f2fae9be926ddf6e7164418cddd7eddb3a613d34a1aafd9b680905ff7d0fc0ddcf46c25f3a5f4370905b77541f257f990babcc11a7bfd6f500249395a
SSDEEP

192:JKZziMoAkD+xoh6yXh+wCG+8G+rf1aXVG56CKvLp+kfw25lFhcDWebRDQu1rl3:JKZziMoAkD+xoh6yXh+wCG+8G+rf1aX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6b1c4c0ff99192be0621b4beef8930_JaffaCakes118

Files

2f6b1c4c0ff99192be0621b4beef8930_JaffaCakes118
.dll windows:5 windows x86 arch:x86

01c41bde2e28b577655077042a01522f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 369B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ