72f7442936ba34fde6bfe7ac75622815_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f7442936ba34fde6bfe7ac75622815_JaffaCakes118
Size

6.3MB
MD5

72f7442936ba34fde6bfe7ac75622815
SHA1

c6bc57d73c90d54a39b6c4cc2aabafc4ae167e6c
SHA256

449fc4d5328cc102ed28070c50bd9973ba9e0ede0677644e3af9b3424d56feaf
SHA512

e8bb71191433b9da64936634cc77697ce104cbd50092332ff3d76e2540fafde70c4649b6d510cf195f9e40884a73a848587d8230993364d726d0c2d3ab547dc3
SSDEEP

98304:tJ3hN59gjqCmfiLqb6qe00a9Q76LJ3hN59gjqCmfiLqb6qe00a9Q76:HhT9gUqUh02Q74hT9gUqUh02Q7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f7442936ba34fde6bfe7ac75622815_JaffaCakes118

Files

72f7442936ba34fde6bfe7ac75622815_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ