2a97e6fa6f456810a5c6aa45fd53c774_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a97e6fa6f456810a5c6aa45fd53c774_JaffaCakes118
Size

60KB
MD5

2a97e6fa6f456810a5c6aa45fd53c774
SHA1

30e459891c7008921f5a44d33534be5e219d655f
SHA256

625da6830a94c6738cd3fd6e859692df46b387cf0506a06f1f93b8501e46d74e
SHA512

6751cad62f69efcdd9021c1b4956396dfa92e62992495239e48f79ecd628527c9831ffa0495312c977c86db113b0b1526970f2b8138976a1e3b8e0a1b8e46182
SSDEEP

1536:oSmBE3C9wTuJMPKF4r2RUHSWQUbIxsT+Z:rmBE3C9wTuJMPKF4r2RUHSu6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a97e6fa6f456810a5c6aa45fd53c774_JaffaCakes118

Files

2a97e6fa6f456810a5c6aa45fd53c774_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ