214c6f56bbf788edcf47d2f9e2074717_JaffaCakes118 | Triage

Sharing

General

Target

214c6f56bbf788edcf47d2f9e2074717_JaffaCakes118
Size

257KB
MD5

214c6f56bbf788edcf47d2f9e2074717
SHA1

1c9a51c064828ed6fa75c236d6bd9535d7e36f28
SHA256

372b9d26d52c5f28e75932bf2e946d1538bfe329669decbaf6e41fc641503dd3
SHA512

5d9dae9ac06f0afe23691bf16c6fe4f4822188ee3b1fec3875e7bc99e4b709f0d42e997a5fa4b14cc6f7e877e3878459f28b8b710d181d4fa04f6fe916813e62
SSDEEP

6144:9I3I1UeQLBvl+2VRr+wxp4XxlOjhzpHqpaI8oDHGgAVmtRF:X1UvLr+dmp4Xx4tz9qpFrD52mt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214c6f56bbf788edcf47d2f9e2074717_JaffaCakes118

Files

214c6f56bbf788edcf47d2f9e2074717_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

IpsBil_vxdnt0
hifiqs_Hodt
i0osoht_GM0402
imehm_S_733

Sections

.text
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ