2fa57eff280f2b745d32dde7840f5bb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fa57eff280f2b745d32dde7840f5bb6_JaffaCakes118
Size

9KB
MD5

2fa57eff280f2b745d32dde7840f5bb6
SHA1

47b39dbd71082e8adbd928d2940d7ca4e3e53560
SHA256

ae1c6f08351c549c1027783bee89e92dea445740f19396f7acf51878dfe07ac0
SHA512

e5d550c8e083b318c7f0346206d6cca92623e8f7c8f55bd4cde0fe81af8d24aa6622ddae62e9204a955f0afe198c1bb05cf69c97ed62b2c4fe15e1d31e8b9f91
SSDEEP

96:sBbJeZYTeApRltA/QsztqcigTEbR9boriAgJSh5imMZST3s79hj3h:A1ekEQQdDTi9tzJSCm7IV3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa57eff280f2b745d32dde7840f5bb6_JaffaCakes118

Files

2fa57eff280f2b745d32dde7840f5bb6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

FileRipper
Gadgets
InitGadgets

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ