2e406a0eaa94d8df31b3724998b01878_JaffaCakes118 | Triage

Sharing

General

Target

2e406a0eaa94d8df31b3724998b01878_JaffaCakes118
Size

11KB
MD5

2e406a0eaa94d8df31b3724998b01878
SHA1

9a5e5ea6760af125c1d8cfad11241dc15b72186e
SHA256

206ccba615bd6df3741c10d8f9609b1b41871823251fdbc5ab5a0f30749e7285
SHA512

9d7ef6880e41e7e65aeacbdd1e61407563225bed6c9113d0804d93c82276b6620472edc0a6d66b80e01f888ecb036ccf4147e22b3909462203f15ea1454e89e8
SSDEEP

192:Aa/df2Djkp7e8J+aYm2A3dsgNbbbA1oQNAmlrE715kz8LSS:Pf2Djkp7b+9qPAyCDekz8Lx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e406a0eaa94d8df31b3724998b01878_JaffaCakes118

Files

2e406a0eaa94d8df31b3724998b01878_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\xp.2GUYSCOM-3A2D30\Local Settings\Temp\f67utqb2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ