0a34910ff2eff39663b77fdb03aa9a2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a34910ff2eff39663b77fdb03aa9a2a_JaffaCakes118
Size

188KB
MD5

0a34910ff2eff39663b77fdb03aa9a2a
SHA1

c01634f0b6b76e39ed9acca12bfd0442941a5caa
SHA256

2047c5e4cee620d1a75aa6d10cf0fc0e2b2009c8d66b187a2382c66217f51588
SHA512

5552373b1554b541f21ec4b83a91a3d87aca40a1c3df2500116e1b4c9e2ce1c2422ebcc2455717695747c1d4ef774bbeafac4890e36d2440bfe5d716f7f64891
SSDEEP

1536:5GPxL86JsUxsyHBEHV0fcEhO+zQzG7mUkjobtp9AY/lapaxO7F:YhVJrsAKV0I+zQzGijYtp9AY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a34910ff2eff39663b77fdb03aa9a2a_JaffaCakes118

Files

0a34910ff2eff39663b77fdb03aa9a2a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ