0b5d9dc405cd1363d1aff278246b01b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b5d9dc405cd1363d1aff278246b01b3_JaffaCakes118
Size

9KB
MD5

0b5d9dc405cd1363d1aff278246b01b3
SHA1

0ba8bd9f2a52bb64d4070d1298409ece48c851cd
SHA256

7123c5891d1acf8b14604d9de9a9f0c6962e83fbab63c0c39d0129bda02fa526
SHA512

103400d291efa5e4034fc9326aebf06c075ccb240b7712a70354e71077a0e1dd142ccc1d2e160c734c3db61c6d0d5b133a872c6933d68249da86b432041af80e
SSDEEP

96:z3wyZWWl+F61efu61C7jEj4vVoXAq7FL8ymEz7C:z3xRE61efu6cwsvZcq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b5d9dc405cd1363d1aff278246b01b3_JaffaCakes118

Files

0b5d9dc405cd1363d1aff278246b01b3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ