f9998ef321e2255a0c76a2e53a585a74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9998ef321e2255a0c76a2e53a585a74_JaffaCakes118
Size

8KB
MD5

f9998ef321e2255a0c76a2e53a585a74
SHA1

549b00387b60843fcaa55f1343d2124031ea7100
SHA256

70884dc7818c2bda560a87a62d961c5dc74d3a1c50981ac1bbfc0f33ba56ea89
SHA512

78c9833579d94e0a8d1835281bfb42bf84ae2c76ec0b59230a9ea498938a3e3f4eb917e5cc538f75d8e56ac8f1ce756ee8132440ea2890ae8fec6c4126492cb7
SSDEEP

96:CO3bW/SIZ/OBMr3tgdXuHti8PyC0M7PR3e1eVC7k3CsEh1VeZDV:T3aap4xNVPUMDs1eVa2Csv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9998ef321e2255a0c76a2e53a585a74_JaffaCakes118

Files

f9998ef321e2255a0c76a2e53a585a74_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ