319ac7b9cceaa340d53c286e106b2a49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

319ac7b9cceaa340d53c286e106b2a49_JaffaCakes118
Size

48KB
MD5

319ac7b9cceaa340d53c286e106b2a49
SHA1

c2ede220a193358b3815df616eef6ec6fed219a3
SHA256

a81af65dc7dc4d4b7185f2743fbb73a26739efb1c118999e916f7e53e7343f86
SHA512

bdc1c9ae900d0d9c93792c65ca7fe13103f1ed4f2fbb5fe9a852c1e6f91a8ef2c3683901967d6a5c6503dc2a23e4c3e84c814633825b1421213814083ab94ad0
SSDEEP

384:j08roVgiDYoj0eXuAJaFGbsrLQw4ji0DHJATq:w8royN+0UuBFG+r23DHSTq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
319ac7b9cceaa340d53c286e106b2a49_JaffaCakes118

Files

319ac7b9cceaa340d53c286e106b2a49_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ