404075ad1d0e05c321029c9087340c20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

404075ad1d0e05c321029c9087340c20_JaffaCakes118
Size

7KB
MD5

404075ad1d0e05c321029c9087340c20
SHA1

954c4582b41acd2f5cd6a3ae3fcf3a6eb7468eeb
SHA256

1a21cf285776fe2423c27d15bab6f83496df567ae20a5c1587725165538b017a
SHA512

884f2dd857ad80677622a6ba7045b6d5d86d0fcee9900148ac8d13d690b1721e29a4ebaed847f56f72b438e1fcffc611e3b82f251c45278bc7ed2a48b6769f0f
SSDEEP

96:Ts1Wnnnynnnnnnnn6nnann7nnXnnbnnKniROs28eNJ7fUJWh:YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
404075ad1d0e05c321029c9087340c20_JaffaCakes118

Files

404075ad1d0e05c321029c9087340c20_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9afefbdd5421ff1ca011cede13cefa28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetProcAddress
LoadLibraryW

user32

SendMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ