4422fae0d03297addc9f031cd5e8da4f_JaffaCakes118 | Triage

Sharing

General

Target

4422fae0d03297addc9f031cd5e8da4f_JaffaCakes118
Size

170KB
MD5

4422fae0d03297addc9f031cd5e8da4f
SHA1

118e1e8b79bddccc39c24cfbff075ced507e7777
SHA256

12a1d4e0e20cda8500b6036eff28abaa5ce90f927bf5d9dbc22b73613483adfe
SHA512

0b7ea717b5fe80578dd1b439c8f89afcca96e852074fbf3157c0a3927461359945fc75acafa0780e923f22ea7b507dcb9578fe2e96ef25b59fd8b2915bb952d0
SSDEEP

1536:8ML6f7tA8hj86YF3bnnBas4ICIId/uA4sC+3XjK7Gxdot:8ML6lj86YFbMsTId/uAG+3zKixdot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4422fae0d03297addc9f031cd5e8da4f_JaffaCakes118

Files

4422fae0d03297addc9f031cd5e8da4f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ