d06d8344e88737f7d3698cdc71c3a821_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d06d8344e88737f7d3698cdc71c3a821_JaffaCakes118
Size

272KB
MD5

d06d8344e88737f7d3698cdc71c3a821
SHA1

5b4f4aa6bf1336faeab32e8b6a2a34bb7b92979a
SHA256

e545d191db0db9911099e8021d95b837e7c895df17e1a59167a7fc50a201d333
SHA512

06c0ab638c763a69dc9a0a95b80bfb480a259b7dc5fb43108186f49de250319fcc9286ed7ad04de4c7b6b48abc67a55f8ef6f9f50aa0f4a2737ae6abc179ccdc
SSDEEP

3072:JRIhZwv1gy4hmTcMGC26fWVGcE0W1DzSplXU0frRN8Tv3ykViqThhhe0Y3B4XS9s:JR71H4iF+dAGWZVB9YRjMwHzEUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d06d8344e88737f7d3698cdc71c3a821_JaffaCakes118

Files

d06d8344e88737f7d3698cdc71c3a821_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

ODBCI_rddGrj
SpacYoum_Libheng

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ