3141603945e87c32f33230571832426f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3141603945e87c32f33230571832426f_JaffaCakes118
Size

60KB
MD5

3141603945e87c32f33230571832426f
SHA1

cc7df87dbc7faaecd5e7cb8f211151104416506e
SHA256

74610d9839077e5303069051d16d6a84733141dbe1fc00d3768b60ef9320cd0a
SHA512

2a8121e197d0ab3c5ba7c7c7decefdf0308e0effcf406eb8f3824fc8696f23124a2ff52627290a3d86e7c9ae156686d7e7a001053cfa81370ae1ddc8b69cda98
SSDEEP

768:fvdAlZmHm24A2I70+VL5RzMqWtqdN1eAhrzYT7J3LKs:3d54zM9RzIErAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3141603945e87c32f33230571832426f_JaffaCakes118

Files

3141603945e87c32f33230571832426f_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ