3d3bda721fcb03c90546eabb79d31ddb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d3bda721fcb03c90546eabb79d31ddb_JaffaCakes118
Size

43KB
MD5

3d3bda721fcb03c90546eabb79d31ddb
SHA1

0c9e4ab22165f0645ddad4609c9ef3573fb318d1
SHA256

64f0787a295161042299b0c544d91704f43a46fbde7c868c8f94020654e8a074
SHA512

cbe92da393fd3da3c324ce901e0d16ced3fa3c8d5734ad6b9bed5cd1153f642b7181375fb376ef0d45c9684b6cb5c2df8d11999c36aee2c3bc9b0a2a7e534682
SSDEEP

768:g2y0fCHR2MvsOcE+fIsjnhrG41IILFkuLMf6r2iW1acX64:w0fyLjfVsDhrDiuLMirc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d3bda721fcb03c90546eabb79d31ddb_JaffaCakes118

Files

3d3bda721fcb03c90546eabb79d31ddb_JaffaCakes118
.dll .js windows:5 windows x86 arch:x86 polyglot

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ