0ee2139cf05e48fdce0738f2bbab9846_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ee2139cf05e48fdce0738f2bbab9846_JaffaCakes118
Size

220KB
MD5

0ee2139cf05e48fdce0738f2bbab9846
SHA1

c2a96045736eaf74f6b54bb6862c724a3f2da428
SHA256

ce8c5be4161e4cbc8612397822cf20961544271ed837f4d395a30535ce16cf6f
SHA512

feb4edbb430cfd8faad5a8a6babe00a3d526ffa8b6e8b838dfbc0dbca80b3a66640dca284e3a021517f82dfbe86d89808a1c1826b70fdb2e51c6544fd0148d7a
SSDEEP

6144:avNY7dhIu6+IBTIqkWt6wRsUX2cmdeUV2:c+dqnRXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ee2139cf05e48fdce0738f2bbab9846_JaffaCakes118

Files

0ee2139cf05e48fdce0738f2bbab9846_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ