ae39c264e4501eb0c021516968cfa9ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae39c264e4501eb0c021516968cfa9ef_JaffaCakes118
Size

153KB
MD5

ae39c264e4501eb0c021516968cfa9ef
SHA1

89a85da65d9255c601fa9af48f60e56815e746b2
SHA256

4c4238018e1e6c4c8d4b0c768563033590cc917f2afe00a7e2f5528a7aca9b9f
SHA512

ee060772c599c27fe5786d74cee72886d921dff2db8e61a89a7645bcd446f4d0c67e742313b4107afa74d72ac662f327fcf5cbd04662fda36ebb3a10e58fcfbb
SSDEEP

3072:nhsEB+g8v7zyDHIUsNQrOKDgQvryIWEQA7/9ua:nhj+gcKXvmIyA7/9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae39c264e4501eb0c021516968cfa9ef_JaffaCakes118

Files

ae39c264e4501eb0c021516968cfa9ef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ