0b0791699eaf5adb5d5c154ef39d1bb1_JaffaCakes118 | Triage

Sharing

General

Target

0b0791699eaf5adb5d5c154ef39d1bb1_JaffaCakes118
Size

8KB
MD5

0b0791699eaf5adb5d5c154ef39d1bb1
SHA1

7932b85c022b03643caa65aa3e6cfcf5ccf22485
SHA256

6777682909b9c47746ab9250fa6f0c224aea5edc645159c5ddc886317eaf962c
SHA512

01d3c436946877e42defeb004a5d88bcce51626e0f8291fc8c4eb1c121d45cac20c17859e1ffdeafe16f095b3b9574a78ee767fb22e0435c6e38b286900dde74
SSDEEP

192:ibBW3lZ8R0NVrSRUBs8AmFXZ4zBQB2Db:ibyZ8R0NV/tezBQB2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b0791699eaf5adb5d5c154ef39d1bb1_JaffaCakes118

Files

0b0791699eaf5adb5d5c154ef39d1bb1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ