c8d557c78972b6dd97ecded94fd3f5b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8d557c78972b6dd97ecded94fd3f5b1_JaffaCakes118
Size

59KB
MD5

c8d557c78972b6dd97ecded94fd3f5b1
SHA1

bd5743464612b72aab967d43ba01e88e2408a212
SHA256

3eb187ed6df78c3744321e292c352aba3ac98f5f947f6b34b5997927e3ce4b0c
SHA512

deb98fb7f5498cb9573e4c24ad231348fd72dbbdb1f7a99af183726401ed1adfa466f2e7026d75ec4ec7f9f81ce5925224314a8185e56d6dc419f02c88d4a7e7
SSDEEP

768:c55kSZUbA+w1ytrmrcq3lO5PPQWifOlk42t7ae1ZpCe9+E2G0z:0kJ2yaFVO5PPP2t7ae1Zlaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8d557c78972b6dd97ecded94fd3f5b1_JaffaCakes118

Files

c8d557c78972b6dd97ecded94fd3f5b1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

RunPE.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ