f53ee4dee44a04728267d44448dfd425_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f53ee4dee44a04728267d44448dfd425_JaffaCakes118
Size

152KB
MD5

f53ee4dee44a04728267d44448dfd425
SHA1

5af1a9e80223c373f75c43277a0746e5c812f5d8
SHA256

68570610553a26c4d0bbdf8fd50e161709afa5b8804b6083414653ed72bd7aad
SHA512

624d0536ffc33495235989455034fb147b4d7084faef16837366dde722c3470580e8ed849da5c23bf60279ab9755c2b77640d202d7106489aee047547b047d99
SSDEEP

1536:pKwdUZJ3tmRmdWgy1IYm0h+gJ90LnriXgXDAbWcOBgU2FkhFU:tUj3tmRmd8IX0h5mnmwDMOBgUg2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f53ee4dee44a04728267d44448dfd425_JaffaCakes118

Files

f53ee4dee44a04728267d44448dfd425_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ