0a362ada4187105eada84a96ba1df0db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a362ada4187105eada84a96ba1df0db_JaffaCakes118
Size

231KB
MD5

0a362ada4187105eada84a96ba1df0db
SHA1

d67724bf949afef58400ef586717540930cd42f7
SHA256

36a2485c2e4f3db245cb65f0240ed3ce5141581b9e177d3a4c627cdceb8fbe05
SHA512

ac6f7e67f00c15064cc3421b2b5e4ab563f2008f42f7ddcde0cbad6dcf59cdec05f005e3025bf04f3f9cbc9f3c87948a43d5044ccf8f4e7004bf97a83af15013
SSDEEP

3072:zYS1RZ+SNivwYl0UJTbj3qOjvSbJ84iV2tcS6TcOnxdHG9FkHTXiMq/Cr:ztLcIYfJIbJ84i2tzApnHG9FkHTXA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a362ada4187105eada84a96ba1df0db_JaffaCakes118

Files

0a362ada4187105eada84a96ba1df0db_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ