faa8d800bcf6546041829e94a54fb809_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa8d800bcf6546041829e94a54fb809_JaffaCakes118
Size

536KB
MD5

faa8d800bcf6546041829e94a54fb809
SHA1

50fe7d83d072b41d05b9a779dbf041e41fe83fdd
SHA256

82923a54d274726f5d2f6461453faf984eb7e976e0ff1cae764fcd06187b5e45
SHA512

3a5e88e641348dc12c630c84b3047e93b89f427e5886e71e5ae293d4ecc9063d228342ba4f8c4fab7978abb03610bf68faf5eea9064ccb0a88a172d46f483e0a
SSDEEP

6144:AO6Idisah24Y6mlSnfmMUJKuTRzN520a4AoQqlVS54FJT6OQw/FiD:P6Id6YpQfmvcuT12F4eE/FlzQwNiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa8d800bcf6546041829e94a54fb809_JaffaCakes118

Files

faa8d800bcf6546041829e94a54fb809_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ