5084e13896135a78e61b9098ae28f6c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5084e13896135a78e61b9098ae28f6c0_JaffaCakes118
Size

5KB
MD5

5084e13896135a78e61b9098ae28f6c0
SHA1

1a5f96493edf6f1295d4e00c42c1bf66d3ec7ab8
SHA256

f321c093f3221fe94c5e2c94233b5bf8221d7b283582cdd41e59e1b7910a5841
SHA512

64508b892a9d20afcd61613d43cf66a21e161f1182b7200ff86f2e0b9639307d8398a9aee131cc07486782db2698b1401d03b30ad4f41f8f293218f7820e3fce
SSDEEP

48:6cijwjDEG5Lqjzl+Iv+nbDJDQZAqNb6CMZWPN7XbZQ+wgH:7WwjVgxv+bDJDXCYWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5084e13896135a78e61b9098ae28f6c0_JaffaCakes118

Files

5084e13896135a78e61b9098ae28f6c0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ