87239b79f555be10f80f19754ccc4893_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87239b79f555be10f80f19754ccc4893_JaffaCakes118
Size

144KB
MD5

87239b79f555be10f80f19754ccc4893
SHA1

3429bc640f0179f72aeebedd1ab6d914943190da
SHA256

b42c3ed7f854cedca5d14b3bc4d82739eb75dc9d6b24eb85d24d8937e1778e7d
SHA512

c9640cb5d49655baa78ba8189179df071f2daeca8b676c8b59b5ef30882b72c3d0c9a21d858b2efa6be009ea4f1d5c3420ff83ded243eeaf09a4b383fa0b9d55
SSDEEP

1536:VPTy9u9uxMQve+yPJ2VeICZQSL/qWj559yHKDcYG:VPTy9u96MdPJ8eZZQSL/qWjZyHKDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87239b79f555be10f80f19754ccc4893_JaffaCakes118

Files

87239b79f555be10f80f19754ccc4893_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ