ecc1d424b6cbef408093c11fa73cc66c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecc1d424b6cbef408093c11fa73cc66c_JaffaCakes118
Size

14KB
MD5

ecc1d424b6cbef408093c11fa73cc66c
SHA1

523ff798aa8d829c88296fd71bd733d30c781e57
SHA256

47bca16d37c76b89c6d610ea8e73d4883047d1685cc1487ed763007596ebbf57
SHA512

6e6ce92fccfbd3fc39b24dc52aacc4d4c3d3393c5305d2031a19659f513741484e1e640319107755e1615c062f5abe7967abacd306e2dc7da335816b58f307d6
SSDEEP

384:BHDKgLLhY/y6UwebbbPbKEwMqKmLT8X1bO:0gLLi66UwebbbPbKEw4bO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecc1d424b6cbef408093c11fa73cc66c_JaffaCakes118

Files

ecc1d424b6cbef408093c11fa73cc66c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ