22ad468d8a68917f72937e8f18b33949_JaffaCakes118 | Triage

Sharing

General

Target

22ad468d8a68917f72937e8f18b33949_JaffaCakes118
Size

13KB
MD5

22ad468d8a68917f72937e8f18b33949
SHA1

d42555d1a6cd6986e2f39e99f9e646cdf83a54db
SHA256

cc9c34910597e725e71fccf935b110035795108d9737a26354ec8b4deb9414d5
SHA512

bc248c8daa6282646633a0a366f3da6f25b4ae2c8bf7a230eacf7ff6c8bf4e4a0c88f1e8e71e1985128174eede50ca10f36659b8b0a2e89948ae587c0c83872c
SSDEEP

192:6cwuZZqiOYP6i0AuBhXCgpbyKOiiAm035VGRV:6HunqiOvi0Au7XCghyIimkV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ad468d8a68917f72937e8f18b33949_JaffaCakes118

Files

22ad468d8a68917f72937e8f18b33949_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ