32d39caa61eb7f1d9f5467e55a19553c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32d39caa61eb7f1d9f5467e55a19553c_JaffaCakes118
Size

260KB
MD5

32d39caa61eb7f1d9f5467e55a19553c
SHA1

bd688b5bef743dd9c228ac9dbd4a150f0ffc16be
SHA256

748d3d12a69cb8b4afae0996a88fdf6a98d6839bc9d41a9ca51220c72dbc7894
SHA512

286cef2b7ebd68f3adcc286e92b0714c6ae127a972aaad332679efede6c4f2ff122c93075722d2676172875f7719881cdfefbc6fc7a8ada03e95dd03bb17e741
SSDEEP

6144:SIzs5UB45ICHJoCpLmh56pHY8mNnt6JG:SBdG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32d39caa61eb7f1d9f5467e55a19553c_JaffaCakes118

Files

32d39caa61eb7f1d9f5467e55a19553c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ