009abb86169a0e3c7d60a055fdf26eef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

009abb86169a0e3c7d60a055fdf26eef_JaffaCakes118
Size

48KB
MD5

009abb86169a0e3c7d60a055fdf26eef
SHA1

18df7e2dfb73316d03676771814a84470b54b62f
SHA256

06ca324a6aad4b4aae3e4d5bf14d36d5e79a37010df2cae2895a6cfcd6dffd11
SHA512

4919df783b85d1ec7b5d6863bad29d9e219f3a9ce2db7ed6b5fa7333338250c0f3ec391486065a9188fc85ddbe63ac047b9ac4096d174c4321a59ccb3aacb981
SSDEEP

768:oZzZhYrYmhjUm2Zg5Gvfh4IEh5bEQlQiJFN9O8IstP0r:oZl+kajUTCo3Eh5bvlpFN9O8Istcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
009abb86169a0e3c7d60a055fdf26eef_JaffaCakes118

Files

009abb86169a0e3c7d60a055fdf26eef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ