179819beecce3ab94e9d94286ce7c4df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179819beecce3ab94e9d94286ce7c4df_JaffaCakes118
Size

28KB
MD5

179819beecce3ab94e9d94286ce7c4df
SHA1

8a3f0c4fe7650c9f9dff49f2d18844292f860b15
SHA256

573f163ffec273ac4383729129b173c1c668110f2d5a5a6dceaf1f2f8a48dc00
SHA512

aa66f2a9effd4b02244b17061f0202a9886d5eb625140c01c1a6b3fc13d0149dd53d78730df5b7f02536169a7f9617dacd0fb94a30e124d35d080fde487304b8
SSDEEP

192:cdxLscAaUHxHVFmhbjatc5QsUBGDtspWjGeFILY6iw36+HQjXeLZ67iNm:c886azUBGD9FILYxw3YOIWNm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179819beecce3ab94e9d94286ce7c4df_JaffaCakes118

Files

179819beecce3ab94e9d94286ce7c4df_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ