9e3f879e9e29e9ec3eea46ff09505843_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e3f879e9e29e9ec3eea46ff09505843_JaffaCakes118
Size

741KB
MD5

9e3f879e9e29e9ec3eea46ff09505843
SHA1

e69986b68288272332957556b063b8c2d6f10f95
SHA256

7b621f46c79e67b9dffb7d97342a3d4381d14e946a38cdd7b1b2a216b6ff2deb
SHA512

cf04cccf2f951c77a9e10037ce4f5990f7cb341e525b360a4f727c345cfd6d4e90210f15ed960504c7ae62010ae17305e064afe9a23cf176b35a26c6ab8719b8
SSDEEP

12288:gkW7wkDiX+lGateF9FsvJ3HEHvwIFEkMndEPyJVTAIpLCZn2x3:qGaojFsBUHvTUGYNpTx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e3f879e9e29e9ec3eea46ff09505843_JaffaCakes118

Files

9e3f879e9e29e9ec3eea46ff09505843_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 739KB - Virtual size: 738KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ