45eabf252085c37585ba02b0006e027a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45eabf252085c37585ba02b0006e027a_JaffaCakes118
Size

42KB
MD5

45eabf252085c37585ba02b0006e027a
SHA1

31f4cf3b399dfe8a42b6798c12e0027eaade0b36
SHA256

93b390b4574be2fd64be171d46ed9b0947d3301e5fefa07228eca9a2843c1a97
SHA512

07cb03a05f09dccd3d92773d0db2b7cff92c874eadebba5999e098244d47be7ce3920a97feca3d8f431b072bf2ad2ca2acafece4f3273762f49709ce881a4b4a
SSDEEP

768:jC7E1MGX8I0TAOuRSB0pD4jlypL2Ad7OZeTUZa:jC7+MGXOzuRrI6aApweOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45eabf252085c37585ba02b0006e027a_JaffaCakes118

Files

45eabf252085c37585ba02b0006e027a_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

WininetPlugin.pdb

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ