3dc4aaa5948fcf4430246189c75374b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc4aaa5948fcf4430246189c75374b0_JaffaCakes118
Size

5KB
MD5

3dc4aaa5948fcf4430246189c75374b0
SHA1

d9bceb65c38e7337d95299409c16e818a70047bb
SHA256

11c02ca5017706097c83f004fc2c9523ad1ab2a0501e9990704687d36805426c
SHA512

e287c5524f911bf080df1bc119deeaa459ef6acb0b9f124d45a1334873fa2448a87ba19a6807eac97acb6f6f6d9a8aa93d87bb5a01dcd56713decdb56056d175
SSDEEP

96:FurYVbs15rZ+TMz6ZTHNu2a8+x9G3G1c/YFAWch:F746TMz9BGF/YFAWch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc4aaa5948fcf4430246189c75374b0_JaffaCakes118

Files

3dc4aaa5948fcf4430246189c75374b0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

rundll32

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ