176caf242b88cae9e576cb3013457aaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

176caf242b88cae9e576cb3013457aaa_JaffaCakes118
Size

10KB
MD5

176caf242b88cae9e576cb3013457aaa
SHA1

b1b1b46cd50a7c232e09f925b71a9d518a99bd6b
SHA256

7dc6a6a1cf19a05fdcaf4eeb9fb11c2fd39a3e23b92155202f1a66d43f1d75ee
SHA512

5a64d3a4332a1fbfb41670db6700a83cfd3dddedfff4daf90e61d183e050456ec0245e3cda0b65ce67a9c07250b66efc5488c727e59f7ad7b9d8d34509b26eb4
SSDEEP

192:y9p3wYxLm9wtKPLK3nEqB0AmHTUbpJiMk:y91wYxLmetKPhlFMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
176caf242b88cae9e576cb3013457aaa_JaffaCakes118

Files

176caf242b88cae9e576cb3013457aaa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ