254e173f3ca8e9e7bc01af3c92399f4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254e173f3ca8e9e7bc01af3c92399f4a_JaffaCakes118
Size

13KB
MD5

254e173f3ca8e9e7bc01af3c92399f4a
SHA1

58cb7ba7da0108d26137026af7b0c81721da37c3
SHA256

ce0ca8eca762bccecd7a7eed2b5830d330d7496cd06684ad7a8633b4abdc8389
SHA512

23480854811673937565b21a5cab6d1bddd7b7b294c9c511273f4a80a6991a808d91ecde3b16aa8423b009d020d9896f4e3d45cbf7d5e63a2922d857187cee09
SSDEEP

192:2cwuZZqiOYP6i0AuBhXCgpbeKOiiAmY35VGlF:2HunqiOvi0Au7XCgheIiSUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254e173f3ca8e9e7bc01af3c92399f4a_JaffaCakes118

Files

254e173f3ca8e9e7bc01af3c92399f4a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ