f30ccbd07ebb83f28804d0690e9c3b3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f30ccbd07ebb83f28804d0690e9c3b3c_JaffaCakes118
Size

233KB
MD5

f30ccbd07ebb83f28804d0690e9c3b3c
SHA1

e6611c3153ca522adc1e3a9b32cade7dd0f6a1eb
SHA256

5bbc4c9b5f8d4eec318cdc73df0243377ab01f8d079983423f16d3c6ab6f27d0
SHA512

d108a3f32e29eb5be2850f218c7f3b512cb33e257512f9e36955d701c7abcce52d95d01d6e822fbecb45606f2c3d83b295bf5f2124804ecd5831073b32a0cf9b
SSDEEP

3072:RKGYSNsu2PqpNW7SGDh+RaTlM2yyk+0dsH/IqweI4yPFoQzkX/Mh9gGIVRp9ZEPC:R5YSrNY8aB99Zun6RzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f30ccbd07ebb83f28804d0690e9c3b3c_JaffaCakes118

Files

f30ccbd07ebb83f28804d0690e9c3b3c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ