f05a9b539a3dfad2eba9b8cb1b8e90c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f05a9b539a3dfad2eba9b8cb1b8e90c3_JaffaCakes118
Size

10KB
MD5

f05a9b539a3dfad2eba9b8cb1b8e90c3
SHA1

e8d2c6e6b8ba0a9cf8fd574922432a1478c5d223
SHA256

6fbe6f30db683e33a434d06651143444e43ba70316edc570dfe39c6b97496daf
SHA512

3c2d6dddbc8bbb082055bc3985bef91c94a27fef0925673cc3806913791d881754eb663411959cebe9345fb942cb24fcb224864842af347f6413ba51d03f079a
SSDEEP

192:elTXOPrMbWuHS+ZjWhaL1OImqk2NyjP7Am+KnUmMAqEejxTpcirJGnG1GdEo+b3:ETePoLwP77U8qEejxTpcirJwSyEo+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f05a9b539a3dfad2eba9b8cb1b8e90c3_JaffaCakes118

Files

f05a9b539a3dfad2eba9b8cb1b8e90c3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\MCD2213\AppData\Local\Temp\hu-xdjwq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ