3c607a25a175b7848cb356cfb3c66730_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c607a25a175b7848cb356cfb3c66730_JaffaCakes118
Size

6KB
MD5

3c607a25a175b7848cb356cfb3c66730
SHA1

71b7fe7ba7df7c6917554875d5328be00d52a54c
SHA256

ae11518a85326e9c7f6382fbac6478f5544b319504661b24adbb2651b2c0c0b3
SHA512

9802ee7faac752f9cc806256fcdf7fc17f0a9b47c054827c688a405f87b7b0fb2e0250bd8ca51f36f7735acb784fd85969751c01bf0600f695209c09ad75ddee
SSDEEP

96:FtrRdrY0x7+PZenQx3I0xklEYKJc2QcUI0CH85Q8x0CaByt5eI8InIPPIqGfklt:Ft11+PckxGU+cyptx04m0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c607a25a175b7848cb356cfb3c66730_JaffaCakes118

Files

3c607a25a175b7848cb356cfb3c66730_JaffaCakes118
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ