ed58a660ee319a013aeae425314b59e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed58a660ee319a013aeae425314b59e8_JaffaCakes118
Size

16KB
MD5

ed58a660ee319a013aeae425314b59e8
SHA1

5dd010330f8d2d0b0113cca5bc288a9af43b6ed4
SHA256

4c5aa5549ffd0c2119fff1203cebaad95f225b11fd72983466d353eb12e1d440
SHA512

b1dbe3ea1dd251e67fce4014f6c975a3b6a95a1cb5110d1e98e648e283d4139f42d5647ec34d1785be2b5f682f4c59be3ecee1c1625159affc5d8c1313c022c8
SSDEEP

384:QOkOjYIOvpX1rHdrZ8mw7ORQocCaaWtCfsrJhKFeYbAHWa+YUqyB+6nQf9YdUo:QriCZ5kHWa+YDyB+6nQf9YdUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed58a660ee319a013aeae425314b59e8_JaffaCakes118

Files

ed58a660ee319a013aeae425314b59e8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Documents and Settings\Administrator.LHEE\Local Settings\Temp\bkjbi0lm.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ