2360669fa935c1f23d83b3f6ebcb7f55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2360669fa935c1f23d83b3f6ebcb7f55_JaffaCakes118
Size

11KB
MD5

2360669fa935c1f23d83b3f6ebcb7f55
SHA1

bb5a25b83e784715905fe8044ca736b9aba666fb
SHA256

f797147faabbcc37159c69060e27409d8d73c7ba7499535dfaaeac0960efe258
SHA512

663c00ade11361ad0202571df1b112781d2c59d65fc29635e1f0c95cfb20a41ab7b32a09ba980b5714f581eaa74c177c32291c000dc5e6257f91cf046e0b8e11
SSDEEP

192:9a/df2Djkp7e8J+aYm2A3dsgNbbbA17QNAmTArE715kzm4LSj4:0f2Djkp7b+9qPAlCmekzm4L24

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2360669fa935c1f23d83b3f6ebcb7f55_JaffaCakes118

Files

2360669fa935c1f23d83b3f6ebcb7f55_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\Administrator\Local Settings\Temp\qkwkr4su.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ